Lucene search
+L

9870 matches found

Positive Technologies
Positive Technologies
•added 2021/05/18 12:00 a.m.•5 views

PT-2021-18630

Name of the Vulnerable Software and Affected Versions mpv versions through 0.33.0 Description A format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file. Recommendations For versions through 0.33.0, update to a version later than...

7.8CVSS0.02429EPSS
SaveExploits1References31
Positive Technologies
Positive Technologies
•added 2021/05/07 12:00 a.m.•22 views

PT-2021-6514

Name of the Vulnerable Software and Affected Versions Tcl version 8.6.11 Description A format string vulnerability in the nmakehlp.c component of the Tcl programming language may allow code execution via a crafted file. This issue is related to insufficient processing of format strings, which cou...

10CVSS7.6AI score0.01689EPSS
SaveExploits1References34
CNVD
CNVD
•added 2021/05/06 12:00 a.m.•27 views

Mozilla Rust Formatting String Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A format string error vulnerability exists in the standard library in versions of Rust prior to 1.52.0, which stems from the fact that if the length of a borrowed string is changed after checking it, it could...

8.2CVSS6.3AI score0.02025EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2021/05/04 12:00 a.m.•31 views

libpano13 -- arbitrary memory access through format string vulnerability

libpano13 developers reports: Fix crash and security issue caused by malformed filename prefix...

9.8CVSS3.1AI score0.01941EPSS
SaveExploits0References1
Veracode
Veracode
•added 2021/04/27 11:07 a.m.•20 views

Denial Of Service (DoS)

mpv is vulnerable to denial of service. An attacker is able to crash the application through a buffer overflow by specifying a printf format string which is not verified...

7.8CVSS4.5AI score0.02429EPSS
SaveExploits1References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/26 9:05 p.m.•36 views

Security Bulletin: wscanhw and wscansw vulnerabilities in scanner component of IBM License Metric Tool v9, v7.5, 7.2.2, IBM Endpoint Manger for Software Use Analysis v9 and IBM Tivoli Asset Discovery for Distributed v7.5, v7.2.2

Summary CIT scanner component contains format string vulnerability in wscanhw executable and stack overflow vulnerability in wscansw executable. Successful exploitation of the vulnerabilities allows for scanner process manipulation, and possibly crashing the process. Vulnerability Details CVEID:...

5CVSS0.7AI score0.01232EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/04/16 12:00 a.m.•32 views

Fedora 33 : libpano13 (2021-67cbea4608)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-67cbea4608 advisory. - Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory...

9.8CVSS8.4AI score0.01941EPSS
SaveExploits0References2
Gitee
Gitee
•added 2021/04/14 9:13 a.m.•14 views

CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Chao, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

7.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•9 views

Rust 格式化字符串错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A format string error vulnerability exists in the standard library in versions of Rust prior to 1.52.0, which stems from the fact that if the length of a borrowed string is changed after checking it, it could...

8.2CVSS5.6AI score0.02025EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•8 views

CVE-2020-36323: Use of Externally-Controlled Format String

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

8.2CVSS5.8AI score0.02025EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/04/14 12:00 a.m.•34 views

Debian DLA-2624-1 : libpano13 security update

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. For Debian 9 stretch, this problem has been fixed in version 2.9.19+dfsg-2+deb9u1. We recommend that you upgrade your libpano13 packages. For the...

9.8CVSS7.9AI score0.01941EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/04/13 12:00 a.m.•43 views

Debian: Security Advisory (DLA-2624-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01941EPSS
SaveExploits0References4
Debian
Debian
•added 2021/04/12 6:44 p.m.•112 views

[SECURITY] [DLA 2624-1] libpano13 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2624-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 12, 2021 https://wiki.debian.org/LTS -...

9.8CVSS9.4AI score0.01941EPSS
SaveExploits0
osv_debian
osv_debian
•added 2021/04/05 10:15 p.m.•5 views

DEBIAN-CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS8.6AI score0.01941EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/05 10:15 p.m.•32 views

CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS0.01941EPSS
SaveExploits0References7
Prion
Prion
•added 2021/04/05 10:15 p.m.•29 views

Format string

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

7.5CVSS9.2AI score0.01941EPSS
SaveExploits0References7Affected Software3
osv_ubuntu
osv_ubuntu
•added 2021/04/05 10:15 p.m.•12 views

UBUNTU-CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS5.9AI score0.01941EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/04/05 10:15 p.m.•8 views

CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS7.8AI score0.01941EPSS
SaveExploits0References11
CVE
CVE
•added 2021/04/05 9:34 p.m.•132 views

CVE-2021-20307

CVE-2021-20307 affects libpano13, specifically the panoFileOutputNamesCreate() formatter path in versions up to 2.9.20 (rc2 and earlier). The vulnerability is a format string issue that can lead to reading and writing arbitrary memory values, with potential for remote memory disclosure and, per t...

9.8CVSS9.1AI score0.01941EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2021/04/05 9:34 p.m.•5 views

CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS0.01941EPSS
SaveExploits0References11
Rows per page
Query Builder