Lucene search
+L

824 matches found

OSV
OSV
•added 2024/05/21 3:31 p.m.•31 views

CVE-2023-52868 thermal: core: prevent potential string overflow

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

6AI score
SaveExploits0References12
Debian CVE
Debian CVE
•added 2024/05/21 3:31 p.m.•34 views

CVE-2023-52868

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

7.8CVSS7.6AI score0.00236EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•2 views

CVE-2023-52868: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev-id value comes from idaalloc so it's a number between zero and INTMAX. If it's too high then these sprintfs will overflow...

7.8CVSS5.9AI score0.00236EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/21 12:00 a.m.•1 views

CVE-2023-52748: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fsinitpagearraycache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•2 views

PT-2024-10499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the scsi: qedi component in the Linux kernel. It is caused by the qedi dbg do not recover cmd read function invoking sprintf directly on a user pointer,...

7.8CVSS5.9AI score0.0032EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/04/11 12:00 a.m.•16 views

The vulnerability of the Did_set_langmap() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Didsetlangmap function in the Vim text editor is related to the use of sprintf to write to the error buffer, which is passed to functions that handle option renames. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00563EPSS
SaveExploits1References13Affected Software8
Redos
Redos
•added 2024/04/10 12:00 a.m.•38 views

ROS-20240410-15

A vulnerability in the vim text editor is related to the call to sprintf to write to an error buffer, which is passed to the option callback functions. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.8CVSS7.1AI score0.00563EPSS
SaveExploits1
OSV
OSV
•added 2024/03/27 4:15 a.m.•12 views

DEBIAN-CVE-2023-45927

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...

9.1CVSS8.3AI score0.00844EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 3:15 a.m.•48 views

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

4.3CVSS7AI score0.00642EPSS
SaveExploits0References6
CVE
CVE
•added 2024/03/27 12:00 a.m.•106 views

CVE-2024-25394

A buffer overflow vulnerability exists in the RT-Thread open-source IoT real-time operating system (RTOS) versions through 5.0.2 . The flaw is located in the utilities/ymodem/ry_sy.c component and is caused by an incorrect sprintf call or a missing character . This vulnerability allows for a buff...

4.3CVSS6.1AI score0.00642EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•16 views

RT-Thread 安全漏洞

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. A security vulnerability exists in RT-Thread version 5.0.2, which stems from an incorrect sprintf call or a missing "" character, resulting in a buffer overflow...

4.3CVSS6.2AI score0.00642EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/03/27 12:00 a.m.•16 views

CVE-2024-25394

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

6.1AI score0.00642EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•2 views

CVE-2024-25394: Buffer Copy without Checking Size of Input

A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...

4.3CVSS6.1AI score0.00642EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/21 12:00 a.m.•52 views

Ubuntu 16.04 LTS : Libspf2 vulnerabilities (USN-6584-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6584-2 advisory. USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding updates for CVE-2021-33912 and...

9.8CVSS7.6AI score0.09643EPSS
SaveExploits2References3
Microsoft CVE
Microsoft CVE
•added 2024/02/12 8:00 a.m.•10 views

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.

...

7.8CVSS7.5AI score0.00563EPSS
SaveExploits1
Veracode
Veracode
•added 2024/02/10 10:00 a.m.•34 views

Stack-Buffer-Overflow

Vim is vulnerable of stack-buffer-overflow. The vulnerability due to use sprintfbuf to write into the error buffer using function didsetlangmap in map.c. It leads to call passed down to the option callback functions...

7.8CVSS6.9AI score0.00563EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/09 12:00 a.m.•14 views

The vulnerability of the sprintf function in D-LINK GO-RT-AC750 router software allows a hacker to execute arbitrary commands.

The vulnerability of the sprintf function in D-LINK GO-RT-AC750 router microprogramming software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS8.3AI score0.00986EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2024/02/06 3:45 a.m.•11 views

SUSE CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...

7.8CVSS7.5AI score0.00563EPSS
SaveExploits1References7
OSV
OSV
•added 2024/02/05 8:15 a.m.•6 views

DEBIAN-CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...

7.8CVSS8AI score0.00563EPSS
SaveExploits1References1
OSV
OSV
•added 2024/02/05 8:15 a.m.•17 views

UBUNTU-CVE-2024-22667

Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions...

7.8CVSS7.5AI score0.00563EPSS
SaveExploits1References4
Rows per page
Query Builder