Lucene search
K

8509 matches found

NVD
NVD
added 2024/04/30 7:15 a.m.8 views

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

8.4CVSS9.4AI score0.00227EPSS
Exploits0References2
OSV
OSV
added 2024/04/30 7:15 a.m.18 views

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

6.6AI score
Exploits0References1
OSV
OSV
added 2024/04/30 7:15 a.m.1 views

DEBIAN-CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

8.4CVSS8.5AI score0.00227EPSS
Exploits0References1
OSV
OSV
added 2024/04/30 7:15 a.m.1 views

UBUNTU-CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

8.4CVSS5.8AI score0.00227EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/04/30 12:0 a.m.12 views

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

8.4CVSS7.2AI score0.00227EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/30 12:0 a.m.22 views

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

9.6AI score0.00227EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/30 12:0 a.m.2 views

PT-2024-24234 · Dmitry · Dmitry

Name of the Vulnerable Software and Affected Versions: DMitry Deepmagic Information Gathering Tool version 1.3a Description: The issue is a format-string vulnerability. It has a threat model similar to other known format-string vulnerabilities. Recommendations: For DMitry Deepmagic Information...

9.8CVSS7.8AI score0.04987EPSS
Exploits6References20
CNNVD
CNNVD
added 2024/04/30 12:0 a.m.1 views

DMitry 安全漏洞

DMitry is a Deepmagic Information Gathering Tool by the individual developer J Greig in the UK. A security vulnerability exists in DMitry Deepmagic Information Gathering Tool version 1.3a, which stems from the presence of a format string vulnerability...

8.4CVSS6.8AI score0.00227EPSS
Exploits0References2
CVE
CVE
added 2024/04/30 12:0 a.m.71 views

CVE-2024-31837

Affected software and issue : DMitry (Deepmagic Information Gathering Tool) version 1.3a contains a format-string vulnerability identified as CVE-2024-31837. The vulnerability is described as a format-string flaw in DMitry 1.3a (Unix) with a threat model similar to CVE-2017-7938. Root cause and i...

8.4CVSS6.4AI score0.00227EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2024/04/30 12:0 a.m.23 views

CVE-2024-31837

DMitry Deepmagic Information Gathering Tool 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938...

8.4CVSS9.1AI score0.00227EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/04/18 5:44 p.m.1 views

shim: Out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

6.2CVSS6.5AI score0.00434EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/04/18 1:42 a.m.3 views

shim: Out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

6.2CVSS6.5AI score0.00434EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/04/15 5:59 p.m.6 views

CVE-2023-4856

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint...

8.8CVSS7.5AI score0.00665EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/15 5:59 p.m.11 views

CVE-2023-4856

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint...

8.8CVSS9AI score0.00665EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.2 views

Lenovo SMM/SMM2/FPC 安全漏洞

Lenovo SMM/SMM2/FPC is an application from Lenovo China. A security vulnerability exists in Lenovo SMM/SMM2/FPC that stems from a format string vulnerability. An attacker can use this vulnerability to execute arbitrary commands on specific API endpoints...

8.8CVSS7.5AI score0.00665EPSS
Exploits0References2
OSV
OSV
added 2024/04/09 3:15 p.m.2 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS6AI score0.00771EPSS
Exploits0References1
NVD
NVD
added 2024/04/09 3:15 p.m.20 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS7AI score0.00771EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 2:24 p.m.19 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS8AI score0.00771EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/09 2:24 p.m.24 views

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

6.7CVSS7.2AI score0.00771EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-3562 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.4.1 and below FortiOS versions 7.2.7 and below FortiOS versions 7.0.14 and below FortiOS versions 6.4.15 and below Description: A use of externally-controlled format string vulnerability in FortiOS command line interface ma...

6.7CVSS7.8AI score0.00771EPSS
Exploits0References9
Rows per page
Query Builder