CVE-2021-33360

An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, childprocess, and/or filePath parameters...

CVE-2021-33360

An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, childprocess, and/or filePath parameters...

gnuplot 安全漏洞

gnuplot is an interactive command-line tool that allows users to convert data and data functions into easy-to-see flat or three-dimensional graphics by entering commands. A security vulnerability exists in Stoqey gnuplot 0.0.3 and earlier versions, which can be exploited to execute arbitrary code...

CVE-2021-33360

CVE-2021-33360 affects Stoqey gnuplot v0.0.3 and earlier. The issue allows an attacker to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameters, with the NVD metrics indicating a CRITICAL impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8). A...

SUSE CVE-2016-5239

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors...

SUSE CVE-2017-9670

An uninitialized stack variable vulnerability in loadticseries in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact when a victim opens a specially crafted file...

SUSE CVE-2018-19491

An issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the PSoptions function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when the...

SUSE CVE-2018-19490

An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary amount of data in dfgenerateasciiarrayentry. To exploit this vulnerability, an attacker must pass an overlong string as the right bound of the range...

SUSE CVE-2018-19492

An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrmoptions function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when...

SUSE CVE-2020-25412

comline in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy that may lead to arbitrary code execution...

SUSE CVE-2020-25559

gnuplot 5.5 is affected by double free when executing printsetoutput. This may result in context-dependent arbitrary code execution...

SUSE CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

EulerOS 2.0 SP3 : gnuplot (EulerOS-SA-2022-1725)

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and...

Huawei EulerOS: Security Advisory for gnuplot (EulerOS-SA-2022-1725)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnuplot (EulerOS-SA-2022-1322)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gnuplot (EulerOS-SA-2022-1322)

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and...

Remote Code Execution (RCE)

gnuplot is vulnerable to remote code execution.An attacker is able to exploit the vulnerability by injecting maliciously crafted script via shell metacharacters in Gnuplot commands...

Code injection in @rkesters/gnuplot

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

Mageia: Security Advisory (MGASA-2021-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

gnuplot:sid is vulnerable to denial of service. A Divide by Zero vulnerability exists in the boundary3d function in graph3d.c, causing a Arithmetic exception and application crash...