Lucene search
+L

473 matches found

OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•14 views

Huawei EulerOS: Security Advisory for gettext (EulerOS-SA-2019-1966)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/04 12:00 a.m.•21 views

EulerOS 2.0 SP2 : gettext (EulerOS-SA-2019-2505)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7.2AI score0.04257EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/03 12:00 a.m.•39 views

EulerOS Virtualization for ARM 64 3.0.3.0 : gettext (EulerOS-SA-2019-2320)

According to the version of the gettext packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2019/11/14 12:00 a.m.•42 views

gettext security update

0.19.8.1-17 - Ported CI gating tests to Python 3.6 0.19.8.1-16 - add CI gating tests 0.19.8.1-15 - fix CVE-2018-18751: double-free in xgettext rhbz1647049...

9.8CVSS7AI score0.04257EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2019/11/08 12:00 a.m.•28 views

EulerOS 2.0 SP3 : gettext (EulerOS-SA-2019-2270)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7.2AI score0.04257EPSS
SaveExploits1References2
Veracode
Veracode
•added 2019/11/06 12:21 a.m.•30 views

Arbitrary Code Execution

gettext is vulnerable to arbitrary code execution. A double free bug in the function defaultaddmessage in read-catalog.c could potentially allow an attacker to execute arbitrary code in the system...

9.8CVSS7.8AI score0.04257EPSS
SaveExploits1References10Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/11/06 12:00 a.m.•57 views

RHEL 8 : gettext (RHSA-2019:3643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3643 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

9.8CVSS7.1AI score0.04257EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2019/11/05 9:25 p.m.•84 views

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2019/11/05 9:25 p.m.•27 views

gettext: double free in default_add_message in read-catalog.c

An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...

9.8CVSS7.2AI score0.04257EPSS
SaveExploits1References4
Rockylinux
Rockylinux
•added 2019/11/05 6:10 p.m.•38 views

gettext security update

An update is available for gettext. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gettext packages provide a documentation for producing multi-lingual...

9.8CVSS7.1AI score0.04257EPSS
SaveExploits1
OSV
OSV
•added 2019/11/05 6:10 p.m.•23 views

ALSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS7.1AI score0.04257EPSS
SaveExploits1References2
OSV
OSV
•added 2019/11/05 6:10 p.m.•32 views

RLSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

4CVSS7.1AI score0.04257EPSS
SaveExploits1References2
AlmaLinux
AlmaLinux
•added 2019/11/05 6:10 p.m.•43 views

Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS7.1AI score0.04257EPSS
SaveExploits1References2
NVD
NVD
•added 2019/11/04 9:15 p.m.•14 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.8AI score0.06711EPSS
SaveExploits1References7
OSV
OSV
•added 2019/11/04 9:15 p.m.•16 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.7AI score
SaveExploits0References13
OSV
OSV
•added 2019/11/04 9:15 p.m.•8 views

DEBIAN-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2019/11/04 9:15 p.m.•34 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References3
OSV
OSV
•added 2019/11/04 9:15 p.m.•14 views

UBUNTU-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7AI score0.06711EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2019/11/04 8:27 p.m.•59 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS6.9AI score0.06711EPSS
SaveExploits1
CVE
CVE
•added 2019/11/04 8:27 p.m.•122 views

CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

9.8CVSS9.5AI score0.06711EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder