Lucene search
K

19 matches found

EUVD
EUVD
added 2026/04/13 6:30 p.m.1 views

EUVD-2025-209419

Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc. During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is still passed into UI and logging helper...

5.8AI score0.00002EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-26201

Malware in sbrugna...

5.4CVSS5.5AI score0.00088EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-3117

Malware in sbrugna...

7.5CVSS6.2AI score0.03829EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.1 views

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from a signal handler in sshd8 that may call non-asynchronous signal-safe logging functions, leading to a race condition that can be exploited by an attacker to execu...

9.3CVSS8.2AI score0.63835EPSS
Exploits68References5
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

Libopt.a 3.1x Error Logging Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when handling...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.40 views

Mandrake Linux Security Advisory : mod_php3 (MDKSA-2000:062)

PHP version 3 which ships with Linux-Mandrake are vulnerable to format string attacks due to logging functions that make improper use of the syslog and vsnprintf functions. This renders PHP3-enabled servers vulnerable to compromise by remote attackers. This attack is only effective on PHP...

10CVSS5.6AI score0.26914EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2006/07/31 9:4 p.m.13 views

CVE-2006-3120

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...

7.5CVSS6.2AI score0.03829EPSS
Exploits0References1
NVD
NVD
added 2006/07/31 9:4 p.m.7 views

CVE-2006-3120

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via unspecified attack vectors related to the logging functions...

7.5CVSS7.7AI score0.03829EPSS
Exploits0References8
Check Point Advisories
Check Point Advisories
added 2006/02/12 12:0 a.m.2 views

Update Protection against A Format String Vulnerability in mod_auth_pgsql for Apache

A vulnerability exists in multiple versions of an authentication module modauthpgsql for Apache httpd. To exploit this vulnerability, a user can supply specially crafted information to trigger a flaw in certain logging functions of the module. Successful exploitation could result in the execution...

10CVSS2.3AI score0.49577EPSS
Exploits0
securityvulns
securityvulns
added 2006/01/10 12:0 a.m.46 views

iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability

Multiple Vendor modauthpgsql Format String Vulnerability iDefense Security Advisory 01.09.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=367 January 09, 2006 I. BACKGROUND The modauthpgsql apache module allows user authentication against information stored in a PostgreSQL...

10CVSS0.49577EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2006/01/06 2:50 a.m.3 views

security flaw

Multiple format string vulnerabilities in logging functions in modauthpgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthenticated attackers to execute arbitrary code, as demonstrated via the username...

10CVSS6.1AI score0.49577EPSS
Exploits0References4
OSV
OSV
added 2004/12/06 5:0 a.m.7 views

CVE-2004-0451

Multiple format string vulnerabilities in the 1 logquit, 2 logerr, or 3 loginfo functions in Software Upgrade Protocol SUP allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog...

7.6AI score
Exploits0References6
Exploit DB
Exploit DB
added 2004/06/18 12:0 a.m.20 views

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities

source: https://www.securityfocus.com/bid/10569/info It is reported that Asterisk is susceptible to format string vulnerabilities in its logging functions. An attacker may use these vulnerabilities to corrupt memory, and read or write arbitrary memory. Remote code execution is likely possible. Du...

7AI score
Exploits0
exploitpack
exploitpack
added 2003/04/24 12:0 a.m.12 views

Libopt.a 3.1x - Error Logging Buffer Overflow (1)

Libopt.a 3.1x - Error Logging Buffer Overflow 1 / source: https://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when...

1.1AI score
Exploits0
exploitpack
exploitpack
added 2003/04/24 12:0 a.m.11 views

Libopt.a 3.1x - Error Logging Buffer Overflow (2)

Libopt.a 3.1x - Error Logging Buffer Overflow 2 source: https://www.securityfocus.com/bid/7433/info Libopt library has been reported prone to a buffer overflow vulnerability. It has been reported that several Libopt.a error logging functions, may be prone to buffer overflow vulnerabilities when...

1AI score
Exploits0
OSV
OSV
added 2003/02/19 5:0 a.m.3 views

CVE-2003-0074

Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions 1 debuglog, 2 errorlog, and 3 infolog...

8AI score
Exploits0References5
Debian CVE
Debian CVE
added 2003/02/05 5:0 a.m.14 views

CVE-2003-0074

Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions 1 debuglog, 2 errorlog, and 3 infolog...

7.2CVSS7.6AI score0.0432EPSS
Exploits0
securityvulns
securityvulns
added 2002/12/11 12:0 a.m.38 views

Remote multiple vulnerability in apt-www-proxy.

======================================== INetCop Security Advisory 2002-0x82-009 ======================================== Title: Remote multiple vulnerability in apt-www-proxy. 0x01. Description bash$ lynx -dump http://ironsides.terrabox.com/ahzz/apt-www-proxy/ apt-www-proxy apt-www-proxy is a...

7.4AI score
Exploits0
FreeBSD Advisory
FreeBSD Advisory
added 2001/04/23 12:0 a.m.4 views

FreeBSD-SA-01:35.licq

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:35 Security Advisory FreeBSD, Inc. Topic: licq contains multiple remote vulnerabilities Category: ports Module: licq Announced: 2001-04-23 Credits: Stan Bubrouski Affects...

6.5AI score
Exploits0
Rows per page
Query Builder