Fortinet FortiWeb Formatting String Error Vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A formatted string error vulnerability exist...

sslh 格式化字符串错误漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. sslh suffers from a Formatted String Error vulnerability that stems from the manipulation of the parameter msginfo of the hexdump function of its Packet Dumping Handler component resulting in a formatted string...

Trendnet多种产品格式化字符串错误漏洞

The Trendnet TRENDnet TEW-755AP and others are a router from Trendnet. The TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 are vulnerable to a formatted string error vulnerability, which arises from a failure to strictly filter the type, number,...

Adiscon rsyslog zmq3 input and output module string vulnerability

Adiscon rsyslog is a multithreaded enhancement of syslogd from Adiscon Germany, which is mainly used to collect system logs. zmq3 input and output modules is one of the input and output modules. A security vulnerability exists in the zmq3 input and output module in versions of Adiscon rsyslog pri...

Red Hat Ceph Locally Formatted String Vulnerability

Red Hat Ceph is a distributed object storage and file system from Red Hat. A locally formatted string vulnerability exists in Red Hat Ceph. A local attacker could exploit this vulnerability to cause a denial of service application crash, potentially executing arbitrary code in the context of the...

latex2rtf Formatted String Denial of Service Vulnerability

latex2rtf is a converter for converting LaTeX documents to RTF format. The latex2rtf formatted-printing function fails to adequately filter user input that is used as a formatting descriptor, allowing an attacker to exploit the vulnerability to construct a malicious file that can be parsed by...

GNU a2ps Formatted String Denial of Service Vulnerability

GNU a2ps is a package developed by the GNU Project that supports the conversion of any type of file into a PostScript file. The GNU a2ps formatted-printing function fails to adequately filter user input that is used as a formatting descriptor, allowing an attacker to exploit the vulnerability to...

FFmpeg Formatted String Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A remote format string vulnerability exists in FFmpeg versions prior to 0.10.1. Due to insufficient filtering of user-supplied input via formatted print function format descriptors, an...