Lucene search
K

398 matches found

UbuntuCve
UbuntuCve
added 2021/12/21 8:15 p.m.29 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.8AI score0.00157EPSS
Exploits1References8
Prion
Prion
added 2021/12/21 8:15 p.m.9 views

Design/Logic Flaw

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

4.3CVSS5.5AI score0.00157EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/21 7:57 p.m.15 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

6AI score0.00157EPSS
Exploits1References2
CVE
CVE
added 2021/12/21 7:57 p.m.96 views

CVE-2021-44917

CVE-2021-44917 is a Divide by Zero vulnerability in gnuplot 5.4, specifically in the boundary3d function of graph3d.c, which could cause an arithmetic exception and crash. Multiple connected advisories confirm impact on gnuplot across distros and note remediation via updating the gnuplot package ...

5.5CVSS5.5AI score0.00157EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/12/21 7:57 p.m.23 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.3AI score0.00157EPSS
Exploits1
CNNVD
CNNVD
added 2021/12/21 12:0 a.m.1 views

gnuplot 数字错误漏洞

Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...

5.5CVSS5.8AI score0.00157EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2021/12/21 12:0 a.m.1 views

PT-2021-24170 · Gnuplot +2 · Gnuplot +2

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.4 Description: A Divide by Zero issue exists in the boundary3d function in graph3d.c, which could cause an Arithmetic exception and application crash. Recommendations: For gnuplot version 5.4, consider disabling the boundary...

9.8CVSS6.5AI score0.00614EPSS
Exploits7References39
Github Security Blog
Github Security Blog
added 2021/08/02 5:2 p.m.60 views

OS Command Injection in OpenTSDB

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

9.8CVSS9.8AI score0.9425EPSS
Exploits5References4Affected Software1
OSV
OSV
added 2021/08/02 5:2 p.m.1 views

GHSA-HV53-Q76C-7F8C OS Command Injection in OpenTSDB

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

9.8CVSS6.5AI score0.9425EPSS
Exploits5References3
Tenable Nessus
Tenable Nessus
added 2021/07/09 12:0 a.m.26 views

OpenTSDB yrange RCE (direct check)

Binary data opentsdbyrangerce.nbin...

9.8CVSS7.3AI score0.9425EPSS
Exploits5References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2019:0904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00222EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2021:0549-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00395EPSS
Exploits1References2
OSV
OSV
added 2021/06/07 10:10 p.m.0 views

GHSA-7P7H-4MM5-852V Uncontrolled Resource Consumption in trim-newlines

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service ReDoS for the .end method...

7.5CVSS7.1AI score0.01642EPSS
Exploits0References8
Photon
Photon
added 2021/05/11 12:0 a.m.28 views

Critical Photon OS Security Update - PHSA-2021-4.0-0022

Updates of 'gnuplot' packages of Photon OS have been released...

9.8CVSS9.4AI score0.00614EPSS
Exploits1
Photon
Photon
added 2021/05/07 12:0 a.m.27 views

Critical Photon OS Security Update - PHSA-2021-0022

Updates of 'gnuplot' packages of Photon OS have been released...

7.5CVSS1.6AI score0.00614EPSS
Exploits1
NVD
NVD
added 2021/05/03 12:15 p.m.6 views

CVE-2021-29369

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

9.8CVSS0.01099EPSS
Exploits0References2
OSV
OSV
added 2021/05/03 12:15 p.m.10 views

CVE-2021-29369

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

9.8CVSS7.3AI score
Exploits0References2
Cvelist
Cvelist
added 2021/05/03 11:27 a.m.12 views

CVE-2021-29369

The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

9.9AI score0.01099EPSS
Exploits0References2
CVE
CVE
added 2021/05/03 11:27 a.m.59 views

CVE-2021-29369

The CVE-2021-29369 entry concerns the gnuplot package for Node.js. Affected software: the gnuplot package prior to version 0.1.0. Vulnerable component: execution of Gnuplot commands via shell metacharacters (code execution). Root cause: shell metacharacter handling in the package allows injection...

9.8CVSS9.6AI score0.01099EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/05/03 12:0 a.m.1 views

gnuplot 操作系统命令注入漏洞

gnuplot is an interactive command-line tool that allows users to enter commands to convert data and data functions into easily viewable planar or three-dimensional shapes. gnuplot is a command-line interactive tool that allows users to enter commands to convert data and data functions into easily...

9.8CVSS9AI score0.01099EPSS
Exploits0References3
Rows per page
Query Builder