CVE-2019-14023

CVE-2019-14023 describes a string format issue in HLOS data processing that could allow local exploitation on Qualcomm Snapdragon targets. The vulnerability arises from inputs not being NULL-terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

CVE-2019-14023: Undefined Security Weakness

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar,...

PT-2020-9449

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: A string format issue occurs due to the lack of user input validation, which fails to ensure that inputs are properly NULL terminated before string copy. This issue...

python-jinja2: Sandbox escape due to information disclosure via str.format

A flaw was found in Pallets Jinja prior to version 2.8.1 allows sandbox escape. Python's string format method added to strings can be used to discover potentially dangerous values including configuration values. The highest threat from this vulnerability is to data confidentiality and integrity a...

cPanel Injection Vulnerability (CNVD-2019-36137)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in cPanel. An attacker can exploit this vulnerability to perform string format injection in...

CVE-2017-18389

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...

Format string

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...

CVE-2017-18389

CVE-2017-18389 affects cPanel prior to 68.0.15. The issue is a string format injection in the dovecot-xaps-plugin, as described by SEC-318. The vulnerability stems from how the plugin handles format strings, enabling potential injection through malformed input. Exploitation details, impacted vers...

CVE-2017-18389: Improper Neutralization of Special Elements in Output Used by a Downstream Component

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin SEC-318...

PT-2019-8324

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows string format injection in the dovecot-xaps-plugin. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

python-jinja2: Sandbox escape due to information disclosure via str.format

A flaw was found in Pallets Jinja prior to version 2.8.1 allows sandbox escape. Python's string format method added to strings can be used to discover potentially dangerous values including configuration values. The highest threat from this vulnerability is to data confidentiality and integrity a...

python-jinja2: Sandbox escape due to information disclosure via str.format

A flaw was found in Pallets Jinja prior to version 2.8.1 allows sandbox escape. Python's string format method added to strings can be used to discover potentially dangerous values including configuration values. The highest threat from this vulnerability is to data confidentiality and integrity a...

PT-2018-3867 · Exiv2 +5 · Exiv2 +5

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a denial of service caused by an out-of-bounds read in the Exiv2::Internal::stringFormat function in image.cpp. This can be triggered by remote attackers using a specially crafted file,...

PYSEC-2017-134

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-5524

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

Format string

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

PYSEC-2017-81

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

CVE-2017-5524

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

PYSEC-2017-81

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...

CVE-2017-5524

Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method...