Lucene search
+L

486 matches found

Github Security Blog
Github Security Blog
•added 2022/02/10 11:41 p.m.•67 views

Code injection in @rkesters/gnuplot

@rkesters/gnuplot is an easy to use node module to draw charts using gnuplot and ps2pdf. The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands...

9.8CVSS6.3AI score0.01776EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•21 views

Mageia: Security Advisory (MGASA-2021-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0157EPSS
SaveExploits1References4
Veracode
Veracode
•added 2021/12/31 11:57 p.m.•36 views

Denial Of Service (DoS)

gnuplot:sid is vulnerable to denial of service. A Divide by Zero vulnerability exists in the boundary3d function in graph3d.c, causing a Arithmetic exception and application crash...

5.5CVSS2.8AI score0.00699EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2021/12/23 12:00 a.m.•40 views

Gnuplot code issue vulnerability

Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...

5.5CVSS4.1AI score0.00699EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2021/12/21 9:53 p.m.•49 views

CVE-2021-44917

A flaw was found in gnuplot. A possible divide by zero flaw could allow an attacker to input a specially crafted file leading to a crash or code execution...

5.5CVSS4.4AI score0.00699EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/21 8:15 p.m.•9 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.6AI score0.00699EPSS
SaveExploits1References3
OSV
OSV
•added 2021/12/21 8:15 p.m.•7 views

DEBIAN-CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.3AI score0.00699EPSS
SaveExploits1References1
NVD
NVD
•added 2021/12/21 8:15 p.m.•25 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS0.00699EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/21 8:15 p.m.•28 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS7AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/12/21 8:15 p.m.•46 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.8AI score0.00699EPSS
SaveExploits1References8
OSV
OSV
•added 2021/12/21 8:15 p.m.•8 views

UBUNTU-CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.7AI score0.00699EPSS
SaveExploits1References9
Prion
Prion
•added 2021/12/21 8:15 p.m.•19 views

Design/Logic Flaw

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

4.3CVSS5.5AI score0.00699EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/12/21 7:57 p.m.•130 views

CVE-2021-44917

CVE-2021-44917 is a Divide by Zero vulnerability in gnuplot 5.4, specifically in the boundary3d function of graph3d.c, which could cause an arithmetic exception and crash. Multiple connected advisories confirm impact on gnuplot across distros and note remediation via updating the gnuplot package ...

5.5CVSS5.5AI score0.00699EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/12/21 7:57 p.m.•39 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS6.3AI score0.00699EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/12/21 7:57 p.m.•32 views

CVE-2021-44917

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

6AI score0.00699EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/21 12:00 a.m.•4 views

CVE-2021-44917: Divide By Zero

A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash...

5.5CVSS5.8AI score0.00699EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•6 views

PT-2021-24170 · Gnuplot +2 · Gnuplot +2

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.4 Description: A Divide by Zero issue exists in the boundary3d function in graph3d.c, which could cause an Arithmetic exception and application crash. Recommendations: For gnuplot version 5.4, consider disabling the boundary...

9.8CVSS6.5AI score0.02631EPSS
SaveExploits7References39
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•7 views

gnuplot 数字错误漏洞

Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...

5.5CVSS5.8AI score0.00699EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/08/02 5:02 p.m.•92 views

OS Command Injection in OpenTSDB

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

9.8CVSS9.8AI score0.8533EPSS
SaveExploits5References4Affected Software1
OSV
OSV
•added 2021/08/02 5:02 p.m.•23 views

GHSA-HV53-Q76C-7F8C OS Command Injection in OpenTSDB

A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. tsd/GraphHandler.java attempted to prevent comma...

9.8CVSS6.5AI score0.8533EPSS
SaveExploits5References3
Rows per page
Query Builder