Lucene search
+L

442 matches found

Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

EulerOS 2.0 SP3 : gettext (EulerOS-SA-2019-2270)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Veracode
Veracode
added 2019/11/06 12:21 a.m.27 views

Arbitrary Code Execution

gettext is vulnerable to arbitrary code execution. A double free bug in the function defaultaddmessage in read-catalog.c could potentially allow an attacker to execute arbitrary code in the system...

9.8CVSS5.3AI score0.04257EPSS
SaveExploits1References10Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:0 a.m.57 views

RHEL 8 : gettext (RHSA-2019:3643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3643 advisory. The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be writte...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2019/11/05 9:25 p.m.81 views

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.6AI score0.04257EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2019/11/05 9:25 p.m.16 views

gettext: double free in default_add_message in read-catalog.c

An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...

9.8CVSS7.4AI score0.04257EPSS
SaveExploits1References4
Rockylinux
Rockylinux
added 2019/11/05 6:10 p.m.34 views

gettext security update

An update is available for gettext. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gettext packages provide a documentation for producing multi-lingual...

9.8CVSS9.2AI score0.04257EPSS
SaveExploits1
OSV
OSV
added 2019/11/05 6:10 p.m.28 views

RLSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

4CVSS7.3AI score0.04257EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/05 6:10 p.m.19 views

ALSA-2019:3643 Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS7.3AI score0.04257EPSS
SaveExploits1References2
AlmaLinux
AlmaLinux
added 2019/11/05 6:10 p.m.37 views

Low: gettext security update

The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs. Security Fixes: gettext: double free in defaultaddmessa...

9.8CVSS0.9AI score0.04257EPSS
SaveExploits1References2
NVD
NVD
added 2019/11/04 9:15 p.m.12 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.8AI score0.06711EPSS
SaveExploits1References7
OSV
OSV
added 2019/11/04 9:15 p.m.14 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS9.7AI score
SaveExploits0References13
OSV
OSV
added 2019/11/04 9:15 p.m.3 views

DEBIAN-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2019/11/04 9:15 p.m.30 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7.1AI score0.06711EPSS
SaveExploits1References3
OSV
OSV
added 2019/11/04 9:15 p.m.7 views

UBUNTU-CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS7AI score0.06711EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2019/11/04 8:27 p.m.54 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.8CVSS6.9AI score0.06711EPSS
SaveExploits1
Cvelist
Cvelist
added 2019/11/04 8:27 p.m.41 views

CVE-2015-8980

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...

9.7AI score0.06711EPSS
SaveExploits1References7
CVE
CVE
added 2019/11/04 8:27 p.m.110 views

CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

9.8CVSS9.5AI score0.06711EPSS
SaveExploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/09/30 12:0 a.m.31 views

EulerOS 2.0 SP8 : gettext (EulerOS-SA-2019-2075)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/09/23 12:0 a.m.37 views

EulerOS 2.0 SP5 : gettext (EulerOS-SA-2019-1966)

According to the version of the gettext packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in...

9.8CVSS7AI score0.04257EPSS
SaveExploits1References2
ArchLinux
ArchLinux
added 2019/08/24 12:0 a.m.25 views

[ASA-201908-14] gettext: arbitrary code execution

Arch Linux Security Advisory ASA-201908-14 ========================================== Severity: High Date : 2019-08-24 CVE-ID : CVE-2018-18751 Package : gettext Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-885 Summary ======= The package gettext before...

9.8CVSS1.9AI score0.04257EPSS
SaveExploits1References5
Rows per page
Query Builder