Lucene search
+L

9884 matches found

Cvelist
Cvelist
•added 2012/05/18 10:00 p.m.•41 views

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

7.5AI score0.02659EPSS
SaveExploits0References5
Mend
Mend
•added 2012/05/18 10:00 p.m.•5 views

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

10CVSS0.02659EPSS
SaveExploits0References5
CVE
CVE
•added 2012/05/18 10:00 p.m.•93 views

CVE-2012-2118

CVE-2012-2118 affects X.Org X11 / xorg-server 1.11 with a format-string vulnerability in LogVHdrMessageVerb() in os/log.c that could cause a denial of service or potentially allow arbitrary code execution via input device name. Public disclosures describe the vulnerability and multiple advisories...

10CVSS7.7AI score0.02659EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2012/05/18 10:00 p.m.•37 views

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

10CVSS7.2AI score0.02659EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2012/05/18 12:00 a.m.•8 views

PT-2012-1145

Name of the Vulnerable Software and Affected Versions X.Org X11 version 1.11 xorg-server versions prior to 1.11.4-r1 Description The issue is related to a format string vulnerability in the LogVHdrMessageVerb function. This vulnerability can be exploited to cause a denial of service or possibly...

10CVSS0.02659EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2012/05/18 12:00 a.m.•24 views

Pidgin OTR < 3.2.1 Format String

The version of Pidgin OTR Off-the-Record installed on the remote Windows host is prior to 3.2.1 and is, therefore, affected by a format string vulnerability that could allow a remote attacker to execute arbitrary code on the affected host. C Tenable Network Security, Inc. include"compat.inc"; if...

7.5CVSS8.4AI score0.03522EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2012/05/18 12:00 a.m.•34 views

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

10CVSS6AI score0.02659EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/18 12:00 a.m.•4 views

CVE-2012-2118: Improper Input Validation

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

10CVSS6.4AI score0.02659EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/05/17 12:00 a.m.•25 views

FreeBSD : pidgin-otr -- format string vulnerability (aa71daaa-9f8c-11e1-bd0a-0082a0c18826)

The authors report : Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The flaw is in pidgin-otr, not in libotr. Other applications...

7.5CVSS8.5AI score0.03522EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2012/05/16 12:00 a.m.•45 views

pidgin-otr -- format string vulnerability

The authors report: Versions 3.2.0 and earlier of the pidgin-otr plugin contain a format string security flaw. This flaw could potentially be exploited by a remote attacker to cause arbitrary code to be executed on the user's machine. The flaw is in pidgin-otr, not in libotr. Other applications...

7.5CVSS6.7AI score0.03522EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2012/05/07 6:13 p.m.•21 views

httpd: NULL pointer dereference crash in mod_log_config

The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %C format string, which allows remote attackers to cause a denial of service daemon crash via a cookie that lacks both a nam...

2.6CVSS7.3AI score0.30337EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2012/04/30 5:07 p.m.•31 views

glibc: FORTIFY_SOURCE format string protection bypass via "nargs" integer overflow

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

6.8CVSS7.5AI score0.02717EPSS
SaveExploits5References4
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•24 views

Debian Security Advisory DSA 2431-1 (libdbd-pg-perl)

The remote host is missing an update to libdbd-pg-perl announced via advisory DSA 2431-1. OpenVAS Vulnerability Test $Id: deb24311.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2431-1 libdbd-pg-perl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

5CVSS0.02744EPSS
SaveExploits0
Amazon
Amazon
•added 2012/04/30 12:00 a.m.•41 views

Low: perl-YAML-LibYAML

Issue Overview: Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML aka YAML-LibYAML and perl-YAML-LibYAML module 0.38 for Perl allow remote attackers to cause a denial of service process crash via format string specifiers in a 1 YAML stream to the Loa...

5CVSS6.9AI score0.02426EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•22 views

Gentoo Security Advisory GLSA 201204-08 (DBD-Pg)

The remote host is missing updates announced in advisory GLSA 201204-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

5CVSS0.7AI score0.02744EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•20 views

Gentoo Security Advisory GLSA 201204-08 (DBD-Pg)

The remote host is missing updates announced in advisory GLSA 201204-08. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

5CVSS6.4AI score0.02744EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•20 views

Debian: Security Advisory (DSA-2431-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.4AI score0.02744EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•22 views

Debian: Security Advisory (DSA-2432-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.5AI score0.02426EPSS
SaveExploits0References3
Gentoo Linux
Gentoo Linux
•added 2012/04/17 12:00 a.m.•37 views

Perl DBD-Pg Module: Arbitrary code execution

Background DBD-Pg is a PostgreSQL interface module for Perl. Description Format string vulnerabilities have been found in the the "pgwarn" and "dbdstprepare" functions in dbdimp.c. Impact A remote PostgreSQL server could send specially crafted database warnings or DBD statements, possibly resulti...

5CVSS7.1AI score0.02744EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2012/04/16 12:00 a.m.•127 views

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

10CVSS4.7AI score0.162EPSS
SaveExploits9References1
Rows per page
Query Builder