SUSE-SU-2023:0072-1 Security update for php74

This update for php74 fixes the following issues: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string bsc1206958...

PT-2023-11813 · Unknown · Intgr Uqm-Wasm

Name of the Vulnerable Software and Affected Versions: intgr uqm-wasm affected versions not specified Description: A critical vulnerability was found in intgr uqm-wasm, affecting the function log displayBox in the library sc2/src/libs/log/msgbox macosx.m. The manipulation leads to a format string...

PT-2022-9015 · Unknown +2 · Multimon-Ng +2

Name of the Vulnerable Software and Affected Versions: multimon-ng versions prior to 1.2.0 Description: A critical issue affects the function add ch of the file demod flex.c. The manipulation of the argument ch leads to a format string issue. Recommendations: For versions prior to 1.2.0, upgrade ...

PT-2021-4043

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 1.1.1k OpenSSL versions 1.0.2 through 1.0.2y Description The issue is related to the representation of ASN.1 strings within OpenSSL as an ASN1 STRING structure, which contains a buffer holding the string data and...

MGASA-2021-0230 Updated libpano13 packages fix a security vulnerability

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20.rc2 and earlier can lead to read and write arbitrary memory values CVE-2021-20307...

OPENSUSE-SU-2019:2611-1 Security update for libidn2

This update for libidn2 to version 2.2.0 fixes the following issues: - CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels bsc1154884. - CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings bsc1154887. This update was import...

CVE-2012-0824

gnusound 0.7.5 has format string issue...

CVE-2012-0824

gnusound 0.7.5 has format string issue...

CVE-2012-0824

gnusound 0.7.5 has format string issue...

CVE-2012-0824

CVE-2012-0824 affects gnusound 0.7.5 with a format string issue (root cause: improper format string handling). Public data in the initial doc shows CVSS metrics: CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL). No explicit exploitation details or affected versions beyond 0.7.5 are provi...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5074

CVE-2016-5074 affects CloudView NMS prior to version 2.10a. Connected sources consistently describe a format-string vulnerability in CloudView NMS that is exploitable over SNMP. The vulnerability arises in formatting-related handling within the affected component, enabling potential descriptor in...

CVE-2015-7271

Dell iDRAC7/8 (before 2.21.21.21) is affected by a format-string issue in racadm getsystinfo. The vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on affected devices (impacting confidentiality, integrity, and availability). Dell released fixed ve...

HP Compaq Insight Management Agent 5.0 Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8336/info The Compaq Management Agent HTTP server is vulnerable to a format string issue. A remote attacker may be able to exploit this vulnerability in order to execute arbitrary code with Local System privileges. $ prin...

Vavoom 1.24 sv_main.cpp Say Command Remote Format String

No description provided by source. source: http://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within...

Fedora 19 : xdialog-2.3.1-13.fc19 (2013-22697)

Fixes a format string issue. argv0 was injected unchecked into a format string. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

PT-2014-3410 · University Of California +1 · Boinc +1

Name of the Vulnerable Software and Affected Versions: BOINC version 7.2.33 Description: A format string issue in the PROJECT::write account file function in client/cs account.cpp allows remote attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers ...

PT-2012-4818

Name of the Vulnerable Software and Affected Versions VMware OVF Tool version 2.1 VMware Workstation versions 8.0 through 8.0.4 VMware Player versions 4.0 through 4.0.4 Description A format string issue allows user-assisted remote attackers to execute arbitrary code via a crafted OVF file...

Vavoom 1.24 - p_thinker.cpp VThinker::BroadcastPrintf Multiple Remote Overflows

Vavoom 1.24 - pthinker.cpp VThinker::BroadcastPrintf Multiple Remote Overflows source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit...

Vavoom 1.24 - sv_main.cpp Say Command Remote Format String

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...