Lucene search
K

8509 matches found

Cvelist
Cvelist
added 2022/09/21 7:25 a.m.35 views

CVE-2022-40604 Format String Vulnerability

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction...

7.6AI score0.01531EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/09/21 7:25 a.m.4 views

CVE-2022-40604 Format String Vulnerability

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction...

6.5AI score0.01531EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/14 12:0 a.m.23 views

EulerOS 2.0 SP9 : tcl (EulerOS-SA-2022-2305)

According to the versions of the tcl package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties...

7.8CVSS7.8AI score0.01639EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for tcl (EulerOS-SA-2022-2305)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.01639EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for tcl (EulerOS-SA-2022-2334)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.01639EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for libinput (EulerOS-SA-2022-2295)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00364EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/14 12:0 a.m.20 views

EulerOS 2.0 SP9 : libinput (EulerOS-SA-2022-2295)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A format string vulnerability was found in libinput CVE-2022-1215 Note that Tenable Network Security has extracted the preceding description...

7.8CVSS7.2AI score0.00364EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2022/09/13 9:57 a.m.2 views

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00615EPSS
Exploits0References4
OSV
OSV
added 2022/09/09 3:15 p.m.2 views

CVE-2022-26392

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

6.5CVSS5.8AI score0.00555EPSS
Exploits0References2
OSV
OSV
added 2022/09/09 3:15 p.m.1 views

CVE-2022-26393

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

8.1CVSS5.8AI score0.00574EPSS
Exploits0References2
NVD
NVD
added 2022/09/09 3:15 p.m.26 views

CVE-2022-26393

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

8.1CVSS0.00574EPSS
Exploits0References2
NVD
NVD
added 2022/09/09 3:15 p.m.18 views

CVE-2022-26392

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

6.5CVSS0.00555EPSS
Exploits0References2
Prion
Prion
added 2022/09/09 3:15 p.m.22 views

Format string

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

4CVSS6.7AI score0.00555EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/09/09 3:15 p.m.25 views

Format string

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

5.5CVSS7.7AI score0.00574EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/09/09 2:40 p.m.72 views

CVE-2022-26393

CVE-2022-26393 is a Baxter Sigma Spectrum/WBM format-string vulnerability impacting Wi‑Fi SSID processing (v20D29 in WBM). The flaw allows attackers to trigger format string attacks to read memory and, in some contexts, cause DoS when processing SSID data over the Wi‑Fi interface. Affected produc...

8.1CVSS6.2AI score0.00574EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/09 2:40 p.m.22 views

CVE-2022-26393 Format String vulnerability

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service DoS on the WBM...

5CVSS7.9AI score0.00574EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/09 2:40 p.m.20 views

CVE-2022-26392 Format String vulnerability

The Baxter Spectrum WBM v16, v16D38 and Baxter Spectrum WBM v17, v17D19, v20D29 to v20D32 when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information...

3.1CVSS6.5AI score0.00555EPSS
Exploits0References1
CVE
CVE
added 2022/09/09 2:40 p.m.68 views

CVE-2022-26392

CVE-2022-26392 is a format-string vulnerability in Baxter Spectrum WBM firmware (v16, v16D38, v17, v17D19, v20D29–v20D32) that is exploitable when the device runs in superuser mode and processes application messages. The issue can let an attacker read memory on the WBM via a Telnet/hostmessage co...

6.5CVSS5.3AI score0.00555EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.4 views

PT-2022-17825 · Baxter · Baxter Spectrum Wbm

Name of the Vulnerable Software and Affected Versions: Baxter Spectrum WBM affected versions not specified Description: The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information o...

8.1CVSS7.8AI score0.00574EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.2 views

PT-2022-17824 · Baxter · Baxter Spectrum Wbm

Name of the Vulnerable Software and Affected Versions: Baxter Spectrum WBM versions v16 through v17 Baxter Spectrum WBM versions v20D29 through v20D32 Description: The issue allows for format string attacks via application messaging when in superuser mode, potentially enabling an attacker to read...

6.5CVSS6.7AI score0.00555EPSS
Exploits0References3
Rows per page
Query Builder