Lucene search
+L

3212 matches found

Snyk
Snyk
•added 2025/08/26 5:20 p.m.•12 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•8 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•13 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•12 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•11 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 5:20 p.m.•8 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.8CVSS7.7AI score0.0449EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/26 12:00 a.m.•7 views

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 6.9.13-28 and 7.1.2-2, which stems from a format string vulnerability that...

8.8CVSS7.6AI score0.0449EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2015-8106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format stri...

9.3CVSS7.8AI score0.03556EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2014-8625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple format string vulnerabilities in the parseerrormsg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service...

6.8CVSS6.3AI score0.03296EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2014-6262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execut...

7.5CVSS7.7AI score0.07247EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/22 4:35 p.m.•18 views

CVE-2011-10029

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

8.7CVSS7AI score0.00723EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/20 3:40 p.m.•13 views

CVE-2011-10029 Solar FTP Server <= 2.1.1 Malformed USER Denial of Service

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output1 function of sfsservice.exe. This results in a denial of service DoS condition...

8.7CVSS6.9AI score0.00723EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•17 views

PT-2025-34110 · Undefined · Undefined

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string containing format specifiers is sent, the server crashes due to a read access violation in the output 1 function of sfsservice.exe. This results in a denial of service DoS conditio...

8.7CVSS7AI score0.00723EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2016-7406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2...

10CVSS7.5AI score0.10217EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/08/16 11:12 a.m.•17 views

CVE-2025-38528

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpers static const char fmt = "%p%"; bpftraceprintkfmt, sizeoffmt; The above BPF program isn't rejected and causes a kernel warning at runtime: Please remove unsupported %\x00 in...

7.1CVSS5.3AI score0.00165EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/15 9:29 p.m.•28 views

CVE-2012-10055

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

9.3CVSS8.4AI score0.02354EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/13 9:15 p.m.•29 views

CVE-2012-10055

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

9.3CVSS0.02354EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/13 8:33 p.m.•31 views

CVE-2012-10055 ComSndFTP v1.3.7 Beta USER Format String RCE

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

9.3CVSS0.02354EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/13 8:33 p.m.•23 views

CVE-2012-10055 ComSndFTP v1.3.7 Beta USER Format String RCE

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

9.3CVSS8.3AI score0.02354EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/13 8:33 p.m.•47 views

CVE-2012-10055

CVE-2012-10055 affects ComSndFTP FTP Server v1.3.7 Beta. The vulnerability is a format-string flaw in the handling of the USER command that can overwrite a hardcoded function pointer (WSACleanup from Ws2_32.dll) in memory, enabling an attacker to redirect control flow and bypass DEP via a ROP cha...

9.3CVSS8.3AI score0.02354EPSS
SaveExploits1References5
Rows per page
Query Builder