486 matches found
CVE-2020-25969
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest...
CVE-2020-25969
Summary of CVE-2020-25969 (gnuplot) The vulnerability affects gnuplot v5.5 and is a buffer overflow in the plotrequest() function. According to the provided sources, the issue can lead to denial of service or arbitrary code execution if exploited. The NVD metrics rate the impact as high across co...
CVE-2020-25969
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest...
CVE-2023-36812
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
Remote code execution
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
GHSA-76F7-9V52-V2FW Remote Code Execution for 2.4.1 and earlier
Impact OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. Patches Patched in 07c4641471c6f5c2ab5aab615969e97211eb50d9 and further refined in...
Remote Code Execution for 2.4.1 and earlier
Impact OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. Patches Patched in 07c4641471c6f5c2ab5aab615969e97211eb50d9 and further refined in...
CVE-2023-36812 Remote Code Execution in OpenTSDB
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
CVE-2023-36812 Remote Code Execution in OpenTSDB
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
CVE-2023-36812 Remote Code Execution in OpenTSDB
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
CVE-2023-36812
OpenTSDB (2.4.1 affected; patched in 2.4.2) has a Remote Code Execution vulnerability (CVE-2023-36812) caused by writing user-controlled input to a Gnuplot configuration file and executing Gnuplot. The issue enables unauthenticated remote code execution via crafted requests, and is evidenced by p...
CVE-2023-36812: Improper Neutralization of Special Elements in Output Used by a Downstream Component
OpenTSDB is a open source, distributed, scalable Time Series Database TSDB. OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. This issue has been patched in commit...
PT-2023-25703 · Opentsdb · Opentsdb
Name of the Vulnerable Software and Affected Versions: OpenTSDB versions prior to 2.4.2 Description: OpenTSDB is vulnerable to Remote Code Execution by writing user-controlled input to the Gnuplot configuration file and running Gnuplot with the generated configuration. The issue has been patched ...
Amazon Linux 2023 : gnuplot-common, gnuplot-latex, gnuplot-minimal (ALAS2023-2023-202)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-202 advisory. A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash. CVE-2021-44917 Tenable has extracted the...
Low: gnuplot
Issue Overview: A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash. CVE-2021-44917 Affected Packages: gnuplot Issue Correction: Run dnf update gnuplot --releasever 2023.0.20230607 or dnf upda...
Critical Photon OS Security Update - PHSA-2023-3.0-0578
Updates of 'etcd', 'mysql', 'gnuplot', 'open-iscsi', 'cloud-init', 'runc' packages of Photon OS have been released...
Command Injection
@stoqey/gnuplot is vulnerable to Command Injection. The vulnerability exists due to improper user-input sanitization in the plotCallack function of index.ts, which allows an attacker to execute arbitrary commands on the OS...
stoqey/gnuplot is vulnerable to command injection
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, childprocess, and/or filePath parameters...
GHSA-795W-7426-M94J stoqey/gnuplot is vulnerable to command injection
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, childprocess, and/or filePath parameters...