Lucene search
K

8510 matches found

Prion
Prion
added 2014/12/03 9:59 p.m.19 views

Format string

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.3AI score0.05569EPSS
Exploits1References10Affected Software1
Cvelist
Cvelist
added 2014/12/03 9:0 p.m.19 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.7AI score0.05569EPSS
Exploits1References10
CVE
CVE
added 2014/12/03 9:0 p.m.83 views

CVE-2014-9157

Summary (CVE-2014-9157): Affected software is Graphviz, specifically the format string vulnerability in the yyerror function (lib/cgraph/scan.l). The issue allows remote attackers to cause unspecified impact via format string specifiers in error strings. Connected documents reference multiple ven...

7.5CVSS7.6AI score0.05569EPSS
Exploits1References10Affected Software1
Debian CVE
Debian CVE
added 2014/12/03 9:0 p.m.15 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.4AI score0.05569EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2014/12/03 12:0 a.m.26 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.9AI score0.05569EPSS
Exploits1References3
OSV
OSV
added 2014/12/03 12:0 a.m.0 views

UBUNTU-CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7AI score0.05569EPSS
Exploits1References4
ArchLinux
ArchLinux
added 2014/12/03 12:0 a.m.36 views

graphviz: format string vulnerability

A format string vulnerability has been found in the error reporting part of the parser used by graphviz...

7.5CVSS2.7AI score0.05569EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2014/12/03 12:0 a.m.2 views

PT-2014-8857 · At&T +1 · Graphviz +1

Name of the Vulnerable Software and Affected Versions: Graphviz affected versions not specified Description: The issue is related to a format string vulnerability in the yyerror function in lib/cgraph/scan.l of Graphviz. This vulnerability allows remote attackers to have an unspecified impact via...

7.5CVSS7AI score0.05569EPSS
Exploits1References25
FreeBSD
FreeBSD
added 2014/11/24 12:0 a.m.13 views

graphviz -- format string vulnerability

Joshua Rogers reports: A format string vulnerability has been found in graphviz'...

3.1AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2014/11/08 12:0 a.m.47 views

RHEL 6 : kernel (RHSA-2013:1783)

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

6CVSS6.9AI score0.0381EPSS
Exploits1References8
OSV
OSV
added 2014/10/27 10:55 p.m.2 views

DEBIAN-CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS7.8AI score0.03125EPSS
Exploits1References1
OSV
OSV
added 2014/10/27 10:55 p.m.6 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.7AI score
Exploits0References5
Prion
Prion
added 2014/10/27 10:55 p.m.15 views

Format string

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS8.1AI score0.03125EPSS
Exploits1References5Affected Software1
UbuntuCve
UbuntuCve
added 2014/10/27 10:55 p.m.24 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS6.2AI score0.03125EPSS
Exploits1References1
CVE
CVE
added 2014/10/27 10:0 p.m.43 views

CVE-2012-5580

CVE-2012-5580 affects libproxy 0.3.1. The vulnerability exists in print_proxies (bin/proxy.c) where a format string flaw in a proxy name allows context-dependent attackers to trigger a crash (and possibly code execution) via format string specifiers. Exploitation scenarios mentioned include the h...

7.5CVSS7.6AI score0.03125EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2014/10/27 10:0 p.m.23 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.4AI score0.03125EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2014/10/27 10:0 p.m.18 views

CVE-2012-5580

Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in a proxy name, as demonstrated using the httpproxy environment...

7.5CVSS7.4AI score0.03125EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2014/10/12 12:0 a.m.42 views

Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2014-383)

It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-4216 , CVE-2014-4219 A format string flaw was discovered in the Hotsp...

9.3CVSS7.1AI score0.06118EPSS
Exploits1References14
FreeBSD
FreeBSD
added 2014/09/28 12:0 a.m.27 views

Xymon -- buffer overrun

Debian reports: web/acknowledge.c uses a string twice in a format string, but only allocates memory for one copy...

9.8CVSS9.1AI score0.012EPSS
Exploits0References2
Amazon
Amazon
added 2014/07/31 12:0 a.m.55 views

Important: java-1.6.0-openjdk

Issue Overview: It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-4216, CVE-2014-4219 A format string flaw was discover...

9.3CVSS8.5AI score0.06118EPSS
Exploits0References1
Rows per page
Query Builder