Lucene search
K

8496 matches found

CVE
CVE
added 2022/08/05 3:23 p.m.126 views

CVE-2022-22299

CVE-2022-22299 is a format-string vulnerability (CWE-134) affecting the CLI interpreters of FortiADC, FortiProxy, FortiOS, and FortiMail. Affected ranges include FortiADC 6.0.0–6.2.1; FortiProxy 1.0.0–2.0.7 and 7.0.0–7.0.1; FortiOS 6.0.0–6.4.8 and 7.0.0–7.0.2; FortiMail 6.4.0–7.0.2. The issue ari...

7.8CVSS7.8AI score0.00197EPSS
Exploits0References1Affected Software4
OSV
OSV
added 2022/08/04 10:15 a.m.1 views

DEBIAN-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.5AI score0.00053EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/04 10:15 a.m.1 views

CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.8AI score0.00053EPSS
Exploits1References3
Prion
Prion
added 2022/08/04 10:15 a.m.25 views

Format string

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

2.9CVSS5.7AI score0.00053EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/08/04 10:15 a.m.0 views

UBUNTU-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS5.8AI score0.00053EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/08/04 9:35 a.m.18 views

CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS5.9AI score0.00053EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/04 12:0 a.m.2 views

v4l2loopback 格式化字符串错误漏洞

v4l2loopback is a kernel module for creating V4L2 loopback devices by umläute individual developers. A formatting string error vulnerability exists in v4l2loopback, which stems from potentially leaking kernel stack memory based on the way the string is formatted in the card label, as well as...

7.3CVSS6.8AI score0.00053EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/08/02 10:9 a.m.0 views

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00057EPSS
Exploits0References4
Fortinet
Fortinet
added 2022/08/02 12:0 a.m.47 views

Protect

A format string vulnerability CWE-134 in the command line interpreter of FortiOS, FortiOS-6K7K, FortiProxy, FortiADC, and FortiMail may allow an authenticated user to execute unauthorized code or commands via specially crafted command arguments...

4.3CVSS7.7AI score0.00197EPSS
Exploits0Affected Software5
RedHat Linux
RedHat Linux
added 2022/07/28 4:6 p.m.4 views

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00057EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/07/07 12:0 a.m.16 views

Oracle Linux 9 : libinput (ELSA-2022-5257)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5257 advisory. 1.19.3-2 - CVE-2022-1215: fix a format string vulnerability 2076816 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

7.8CVSS7.3AI score0.00043EPSS
Exploits0References2
Oracle linux
Oracle linux
added 2022/07/01 12:0 a.m.35 views

libinput security update

1.16.3-3 - Fix a format string vulnerability in the device name logging 2076815 CVE-2022-1215...

7.8CVSS2.3AI score0.00043EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/07/01 12:0 a.m.22 views

RHEL 8 : libinput (RHSA-2022:5331)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5331 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...

7.8CVSS7.3AI score0.00043EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2022/06/30 11:57 p.m.3 views

libinput: format string vulnerability may lead to privilege escalation

A format string vulnerability was found in libinput...

7.8CVSS5.7AI score0.00043EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2022/06/30 11:57 p.m.33 views

Moderate: Red Hat Security Advisory: libinput security update

An update for libinput is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS7.1AI score0.00043EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2022/06/30 9:0 p.m.3 views

libinput: format string vulnerability may lead to privilege escalation

A format string vulnerability was found in libinput...

7.8CVSS5.7AI score0.00043EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2022/06/30 9:0 p.m.31 views

Moderate: Red Hat Security Advisory: libinput security update

An update for libinput is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS7.1AI score0.00043EPSS
Exploits0References2
AlmaLinux
AlmaLinux
added 2022/06/30 12:0 a.m.16 views

Moderate: libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fixes: libinput: format string vulnerability may lead to privilege escalation CVE-2022-1215 For more details about the security issues, including the...

7.8CVSS8AI score0.00043EPSS
Exploits0References4
OSV
OSV
added 2022/06/30 12:0 a.m.17 views

ALSA-2022:5257 Moderate: libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fixes: libinput: format string vulnerability may lead to privilege escalation CVE-2022-1215 For more details about the security issues, including the...

7.8CVSS8AI score0.00043EPSS
Exploits0References4
Oracle linux
Oracle linux
added 2022/06/30 12:0 a.m.20 views

libinput security update

1.19.3-2 - CVE-2022-1215: fix a format string vulnerability 2076816...

7.8CVSS2.2AI score0.00043EPSS
Exploits0
Rows per page
Query Builder