Lucene search
K

8510 matches found

NVD
NVD
added 2015/01/04 9:59 p.m.19 views

CVE-2013-2131

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service crash via format string specifiers to the rrdtool.graph function...

5CVSS7.3AI score0.10912EPSS
Exploits0References6
OSV
OSV
added 2015/01/04 9:59 p.m.2 views

DEBIAN-CVE-2013-2131

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service crash via format string specifiers to the rrdtool.graph function...

5CVSS7AI score0.10912EPSS
Exploits0References1
Cvelist
Cvelist
added 2015/01/04 9:0 p.m.34 views

CVE-2013-2131

Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service crash via format string specifiers to the rrdtool.graph function...

7.2AI score0.10912EPSS
Exploits0References6
CVE
CVE
added 2015/01/04 9:0 p.m.72 views

CVE-2013-2131

CVE-2013-2131 affects the Python rrdtool module (1.4.7) as used in Zenoss, with a format-string flaw in rrdtool.graph that can cause a denial of service (crash) when processing crafted format specifiers. Related disclosures note a broader class of format-string vulnerabilities in RRDtool used by ...

5CVSS7.1AI score0.10912EPSS
Exploits0References6Affected Software1
ArchLinux
ArchLinux
added 2014/12/18 12:0 a.m.62 views

glibc: arbitrary code execution

CVE-2012-3406 arbitrary code execution The vfprintf function in stdio-common/vfprintf.c in GNU C Library does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFYSOURCE format-string protection...

7.8CVSS5.9AI score0.07688EPSS
Exploits3References4
Tenable Nessus
Tenable Nessus
added 2014/12/15 12:0 a.m.25 views

Debian DSA-3098-1 : graphviz - security update

Joshua Rogers discovered a format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz, a rich set of graph drawing tools. An attacker could use this flaw to cause graphviz to crash or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

7.5CVSS7.3AI score0.05569EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2014/12/15 12:0 a.m.28 views

Mandriva Linux Security Advisory : graphviz (MDVSA-2014:248)

Updated graphviz packages fix security vulnerability : Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vector, which are not properly handled in an error string...

7.5CVSS7AI score0.05569EPSS
Exploits1References2
Debian
Debian
added 2014/12/11 9:33 p.m.20 views

[SECURITY] [DLA 105-1] graphviz security update

Package : graphviz Version : 2.26.3-5+squeeze3 CVE ID : CVE-2014-9157 Debian Bug : 772648 Joshua Rogers discovered a format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz, a rich set of graph drawing tools. An attacker could use this flaw to cause graphviz to crash ...

7.5CVSS6.8AI score0.05569EPSS
Exploits1
Debian
Debian
added 2014/12/11 4:26 p.m.27 views

[SECURITY] [DSA 3098-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3098-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 11, 2014 http://www.debian.org/security/faq -...

7.5CVSS2.4AI score0.05569EPSS
Exploits1
Debian
Debian
added 2014/12/11 4:26 p.m.28 views

[SECURITY] [DSA 3098-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3098-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 11, 2014 http://www.debian.org/security/faq -...

7.5CVSS6.2AI score0.05569EPSS
Exploits1
OpenVAS
OpenVAS
added 2014/12/11 12:0 a.m.24 views

Debian Security Advisory DSA 3098-1 (graphviz - security update)

Joshua Rogers discovered a format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz, a rich set of graph drawing tools. An attacker could use this flaw to cause graphviz to crash or possibly execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3098.nasl 9136...

7.5CVSS0.4AI score0.05569EPSS
Exploits1References1
OSV
OSV
added 2014/12/11 12:0 a.m.27 views

DLA-105-1 graphviz - security update

Bulletin has no description...

7.5CVSS6.8AI score0.05569EPSS
Exploits1
OSV
OSV
added 2014/12/11 12:0 a.m.11 views

DSA-3098-1 graphviz - security update

Bulletin has no description...

7.5CVSS6.2AI score0.05569EPSS
Exploits1
OpenVAS
OpenVAS
added 2014/12/10 12:0 a.m.19 views

Debian: Security Advisory (DSA-3098-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.05569EPSS
Exploits1References3
OSV
OSV
added 2014/12/09 8:12 p.m.8 views

MGASA-2014-0520 Updated graphviz packages fix CVE-2014-9157

Updated graphviz packages fix security vulnerability: Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vector, which are not properly handled in an error string...

7.5CVSS6.8AI score0.05569EPSS
Exploits1References3
Mageia
Mageia
added 2014/12/09 8:12 p.m.43 views

Updated graphviz packages fix CVE-2014-9157

Updated graphviz packages fix security vulnerability: Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vector, which are not properly handled in an error string...

7.5CVSS6.7AI score0.05569EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2014/12/07 12:0 a.m.25 views

Fedora 21 : graphviz-2.38.0-11.fc21 (2014-15760)

This is an update fixing format string vulnerability in cgraph. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

7.5CVSS6.9AI score0.05569EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2014/12/06 12:0 a.m.32 views

Fedora 20 : graphviz-2.34.0-10.fc20 (2014-15812)

This is an update fixing format string vulnerability in cgraph. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

7.5CVSS6.9AI score0.05569EPSS
Exploits1References3
NVD
NVD
added 2014/12/03 9:59 p.m.13 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.8AI score0.05569EPSS
Exploits1References10
OSV
OSV
added 2014/12/03 9:59 p.m.1 views

DEBIAN-CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.2AI score0.05569EPSS
Exploits1References1
Rows per page
Query Builder