Lucene search
K

8453 matches found

CNNVD
CNNVD
added 2026/04/30 12:0 a.m.5 views

Notepad++ 格式化字符串错误漏洞

Notepad++ is an open-source plain-text editor developed by Don Ho of Taiwan, China. Version 8.9.3 of Notepad++ has a vulnerability related to format strings. This vulnerability stems from format string injection in the Find Results panel’s processing logic, which may lead to denial-of-service...

4.6CVSS5.8AI score0.00008EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.3 views

PT-2026-36170

Name of the Vulnerable Software and Affected Versions Secure Access client for MacOS versions prior to 14.50 Description A format string issue exists in the logging subsystem. Attackers controlling a modified server can force the client to dump small portions of memory into log files, which may...

4.8CVSS5.8AI score0.00015EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.3 views

Notepad++ < 8.9.4 Multiple Vulnerabilities

The version of Notepad++ installed on the remote host is prior to 8.9.4. It is, therefore, affected by multiple vulnerabilities: - A string injection vulnerability exists in the FindInFiles feature. When the nativeLang.xml file's 'find-result-hits' element contains a format string specifier such ...

6.6CVSS6.1AI score0.00014EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2026/04/28 3:34 a.m.140 views

Exploit for Stack-based Buffer Overflow in Asustor Data_Master

CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE Format String CWE-134...

9.9CVSS6.2AI score0.00154EPSS
Exploits1
SUSE CVE
SUSE CVE
added 2026/04/24 1:34 a.m.3 views

SUSE CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/22 9:31 a.m.0 views

EUVD-2026-24708

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References3
NVD
NVD
added 2026/04/22 9:16 a.m.0 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS0.00019EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/04/22 9:16 a.m.3 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References3
OSV
OSV
added 2026/04/22 9:16 a.m.1 views

UBUNTU-CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/22 8:30 a.m.2 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/22 8:30 a.m.2 views

CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/22 8:30 a.m.22 views

CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS0.00019EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/04/22 8:30 a.m.8 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.7AI score0.00019EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/22 8:30 a.m.4 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.3AI score0.00019EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/04/22 8:29 a.m.1 views

CVE-2026-6843

A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...

5.5CVSS5.5AI score0.00019EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-6843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing...

5.5CVSS5.5AI score0.00019EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.2 views

PT-2026-34312

Name of the Vulnerable Software and Affected Versions nano affected versions not specified Description A local user can cause a Denial of Service in the application by exploiting a format string flaw in the statusline function. This occurs when the application attempts to display a directory name...

5.5CVSS5.8AI score0.00019EPSS
Exploits0References23
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.5 views

Red Hat Enterprise Linux 格式化字符串错误漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat, Inc. Red Hat Enterprise Linux 10 contains a vulnerability related to format string errors. This vulnerability stems from a flaw in the statusline function’s handling of format strings. Local users can...

5.5CVSS5.8AI score0.00019EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/20 9:31 p.m.4 views

EUVD-2026-23978

Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow...

6.1AI score0.00073EPSS
Exploits1References3
GithubExploit
GithubExploit
added 2026/04/20 12:16 p.m.50 views

Exploit for CVE-2026-3008

CVE-2026-3008 — Notepad++ 8.9.3 Format String Injection via na...

10CVSS6.2AI score0.00014EPSS
Exploits1
Rows per page
Query Builder