Lucene search
K

13 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/07 3:0 a.m.7 views

CVE-2026-11451

A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument mediadir can lead to command injection. It is possible to launch the attack remotely. Upgrading to version...

7.5CVSS5.5AI score0.02027EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/14 7:4 a.m.11 views

CVE-2025-14586

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible. The...

9.8CVSS6.9AI score0.0246EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/13 6:32 a.m.2 views

CVE-2025-14586 TOTOLINK X5000R cstecgi.cgi snprintf os command injection

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible...

6.5CVSS6.6AI score0.0246EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2022/09/17 12:0 a.m.3 views

PT-2022-33765 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential buffer overflow caused by the snprintf function in the ASoC: SOF: Intel: hda driver. The actual impact and attack plausibility have not yet been proven...

7.7AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2019/07/02 11:54 a.m.3 views

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

tcpemu in slirp/tcpsubr.c aka slirp/src/tcpsubr.c in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure...

5.5CVSS6.8AI score0.00515EPSS
Exploits0References4
CNVD
CNVD
added 2018/11/02 12:0 a.m.4 views

Red Hat Gluster Storage glusterfs server denial of service vulnerability

Red Hat Gluster Storage is the United States Red Hat Red Hat company developed a horizontally scalable storage package for software , it can provide unstructured data storage. glusterfs server is one of the open source scalable network file system . A security vulnerability exists in the 'snprint...

6.5CVSS7.2AI score0.02655EPSS
Exploits0References1
OSV
OSV
added 2018/10/31 8:29 p.m.3 views

DEBIAN-CVE-2018-14661

It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service...

6.5CVSS7AI score0.02655EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/05/17 12:0 a.m.7 views

The vulnerability of the snprintf() function in the Event Registration Protocol Library (RELP) allows a attacker to execute arbitrary code.

The vulnerability of the snprintf function in the Event Registration Protocol Library RELP of librelp is related to the escape of the operation beyond the buffer in memory when processing x509 certificates. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.09662EPSS
Exploits1References15Affected Software3
OSV
OSV
added 2018/03/06 5:29 p.m.0 views

UBUNTU-CVE-2018-1000101

Mingw-w64 version 5.0.3 and earlier, 5.0.4, 6.0.0 and 7.0.0 contains an Improper Null Termination CWE-170 vulnerability in mingw-w64-crt libc-vsnprintf that can result in The bug may be used to corrupt subsequent string functions. This attack appear to be exploitable via Depending on the usage,...

9.8CVSS7.2AI score0.02383EPSS
Exploits0References3
OSV
OSV
added 2016/09/09 10:59 a.m.1 views

UBUNTU-CVE-2016-7176

epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service copy overlap and application crash via a crafted packet...

5.9CVSS6.6AI score0.02523EPSS
Exploits0References4
Cvelist
Cvelist
added 2002/03/09 5:0 a.m.26 views

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...

6.6AI score0.02335EPSS
Exploits0References2
NVD
NVD
added 2001/12/06 5:0 a.m.18 views

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow...

10CVSS6.6AI score0.02335EPSS
Exploits0References2
Packet Storm
Packet Storm
added 1999/08/17 12:0 a.m.36 views

slackdb.txt

Date: Thu, 16 Jul 1998 09:22:40 +0200 From: Martin Bene Subject: Berkley DB problem in slackware distribution Hi! I recently ran into a potential problem with berkley db 1.85 as distributed with all versions of slackware linux: fixed in slackware 3.5 as of 07.14.98 libdb.so.1.85.4 defines snprint...

Exploits0
Rows per page
Query Builder