Lucene search
+L

440 matches found

Tenable Nessus
Tenable Nessus
added 2019/11/06 12:0 a.m.57 views

RHEL 8 : gettext (RHSA-2019:3643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3643 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

9.8CVSS7AI score0.04293EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2019/11/05 9:25 p.m.79 views

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.6AI score0.04293EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2019/11/05 9:25 p.m.14 views

gettext: double free in default_add_message in read-catalog.c

An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...

9.8CVSS7.4AI score0.04293EPSS
SaveExploits1References4
Rockylinux
Rockylinux
added 2019/11/05 6:10 p.m.33 views

gettext security update

An update is available for gettext. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gettext packages provide a documentation for producing multi-lingual...

9.8CVSS9.2AI score0.04293EPSS
SaveExploits1
AlmaLinux
AlmaLinux
added 2019/11/05 6:10 p.m.36 views

Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS0.9AI score0.04293EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/05 6:10 p.m.26 views

RLSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

4CVSS7.3AI score0.04293EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/05 6:10 p.m.18 views

ALSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS7.3AI score0.04293EPSS
SaveExploits1References2
NVD
NVD
added 2019/11/04 9:15 p.m.11 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.8AI score0.06711EPSS
SaveExploits1References7
OSV
OSV
added 2019/11/04 9:15 p.m.3 views

DEBIAN-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/04 9:15 p.m.13 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.7AI score
SaveExploits0References13
UbuntuCve
UbuntuCve
added 2019/11/04 9:15 p.m.30 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References3
OSV
OSV
added 2019/11/04 9:15 p.m.7 views

UBUNTU-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7AI score0.06711EPSS
SaveExploits1References4
CVE
CVE
added 2019/11/04 8:27 p.m.106 views

CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

9.8CVSS9.5AI score0.06711EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2019/11/04 8:27 p.m.38 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.7AI score0.06711EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2019/11/04 8:27 p.m.53 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS6.9AI score0.06711EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/09/30 12:0 a.m.31 views

EulerOS 2.0 SP8 : gettext (EulerOS-SA-2019-2075)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04293EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/09/23 12:0 a.m.37 views

EulerOS 2.0 SP5 : gettext (EulerOS-SA-2019-1966)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04293EPSS
SaveExploits1References2
ArchLinux
ArchLinux
added 2019/08/24 12:0 a.m.24 views

[ASA-201908-14] gettext: arbitrary code execution

Arch Linux Security Advisory ASA-201908-14 ========================================== Severity: High Date : 2019-08-24 CVE-ID : CVE-2018-18751 Package : gettext Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-885 Summary ======= The package gettext before...

9.8CVSS1.9AI score0.04293EPSS
SaveExploits1References5
Veracode
Veracode
added 2019/07/26 2:42 a.m.6 views

Regular Expression Denial Of Service (ReDoS)

gettext-parser is vulnerable to Regular Expression Denial Of Service. The library contains a regular expression that is vulnerable to catastrophic backtracking. When presented with a malicious long string, the regex will run for an exponentially long time, potentially causing the application to...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.76 views

Fedora Update for gettext FEDORA-2018-d6211abfb0

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.7AI score0.04293EPSS
SaveExploits1References2
Rows per page
Query Builder