Lucene search
K

8497 matches found

Prion
Prion
added 2021/05/18 2:15 p.m.15 views

Format string

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

6.8CVSS7.6AI score0.0137EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/05/18 2:15 p.m.1 views

UBUNTU-CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS6.2AI score0.0137EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2021/05/18 2:15 p.m.17 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.5AI score0.0137EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/05/18 1:34 p.m.24 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.6AI score0.0137EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/05/18 1:34 p.m.36 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8CVSS7.6AI score0.0137EPSS
Exploits1
Cvelist
Cvelist
added 2021/05/18 1:34 p.m.13 views

CVE-2021-30145

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file...

7.8AI score0.0137EPSS
Exploits1References5
CVE
CVE
added 2021/05/18 1:34 p.m.299 views

CVE-2021-30145

CVE-2021-30145 describes a format string vulnerability in mpv up to version 0.33.0 that could enable code execution when a user opens a crafted m3u playlist file. Multiple sources (including NVD/NVD list and Gentoo/OpenSUSE advisories) corroborate the impact and advise upgrading mpv to a fixed re...

7.8CVSS7.4AI score0.0137EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2021/05/07 12:0 a.m.3 views

PT-2021-6514 · Tcl +3 · Tcl +3

Name of the Vulnerable Software and Affected Versions: Tcl version 8.6.11 Description: A format string vulnerability in the nmakehlp.c component of the Tcl programming language may allow code execution via a crafted file. This issue is related to insufficient processing of format strings, which...

10CVSS7.9AI score0.08002EPSS
Exploits3References56
CNVD
CNVD
added 2021/05/06 12:0 a.m.11 views

Mozilla Rust Formatting String Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A format string error vulnerability exists in the standard library in versions of Rust prior to 1.52.0, which stems from the fact that if the length of a borrowed string is changed after checking it, it could...

8.2CVSS6.3AI score0.01012EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2021/05/04 12:0 a.m.23 views

libpano13 -- arbitrary memory access through format string vulnerability

libpano13 developers reports: Fix crash and security issue caused by malformed filename prefix...

9.8CVSS3.1AI score0.00222EPSS
Exploits0References1
Veracode
Veracode
added 2021/04/27 11:7 a.m.13 views

Denial Of Service (DoS)

mpv is vulnerable to denial of service. An attacker is able to crash the application through a buffer overflow by specifying a printf format string which is not verified...

7.8CVSS4.5AI score0.0137EPSS
Exploits1References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/26 9:5 p.m.25 views

Security Bulletin: wscanhw and wscansw vulnerabilities in scanner component of IBM License Metric Tool v9, v7.5, 7.2.2, IBM Endpoint Manger for Software Use Analysis v9 and IBM Tivoli Asset Discovery for Distributed v7.5, v7.2.2

Summary CIT scanner component contains format string vulnerability in wscanhw executable and stack overflow vulnerability in wscansw executable. Successful exploitation of the vulnerabilities allows for scanner process manipulation, and possibly crashing the process. Vulnerability Details CVEID:...

5CVSS0.7AI score0.00572EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/16 12:0 a.m.26 views

Fedora 33 : libpano13 (2021-67cbea4608)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-67cbea4608 advisory. - Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory...

9.8CVSS8.4AI score0.00222EPSS
Exploits0References2
Gitee
Gitee
added 2021/04/14 9:13 a.m.4 views

CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Chao, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

7.8AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/04/14 12:0 a.m.29 views

Debian DLA-2624-1 : libpano13 security update

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values. For Debian 9 stretch, this problem has been fixed in version 2.9.19+dfsg-2+deb9u1. We recommend that you upgrade your libpano13 packages. For the...

9.8CVSS7.9AI score0.00222EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.2 views

Rust 格式化字符串错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A format string error vulnerability exists in the standard library in versions of Rust prior to 1.52.0, which stems from the fact that if the length of a borrowed string is changed after checking it, it could...

8.2CVSS5.6AI score0.01012EPSS
Exploits0References10
OpenVAS
OpenVAS
added 2021/04/13 12:0 a.m.32 views

Debian: Security Advisory (DLA-2624-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.00222EPSS
Exploits0References4
Debian
Debian
added 2021/04/12 6:44 p.m.49 views

[SECURITY] [DLA 2624-1] libpano13 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2624-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 12, 2021 https://wiki.debian.org/LTS -...

9.8CVSS9.4AI score0.00222EPSS
Exploits0
NVD
NVD
added 2021/04/05 10:15 p.m.13 views

CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS0.00222EPSS
Exploits0References7
OSV
OSV
added 2021/04/05 10:15 p.m.1 views

DEBIAN-CVE-2021-20307

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values...

9.8CVSS8.6AI score0.00222EPSS
Exploits0References1
Rows per page
Query Builder