Lucene search
+L

55 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/12 12:00 a.m.13 views

The vulnerability of the fgfmd daemon in the FortiOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the fgfmd daemon in the FortiOS operating system is related to the use of uncontrolled format strings when processing binary files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests remotely...

10CVSS8.5AI score0.61725EPSS
SaveExploits8References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.26 views

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the STST TA component in Samsung Teegris’ Android operating system security system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00205EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:00 a.m.13 views

The vulnerability of the iperf function in the application software interface for ASUS RT-AX55, RT-AX56U, and RT-AC86U routers allows a hacker to execute arbitrary code.

The vulnerability of the iperf function in the application programming interface for ASUS RT-AX55, RT-AX56UV2, and RT-AC86U routers is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created data...

10CVSS8.2AI score0.01158EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.13 views

The vulnerability of the application software interface of ASUS RT-AX55, RT-AX56U, and RT-AC86U allows a hacker to execute arbitrary code.

The vulnerability of the application software interface of ASUS RT-AX55, RT-AX56UV2, and RT-AC86U lies in the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created data...

10CVSS8.2AI score0.01158EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:00 a.m.18 views

The vulnerability of the microprogrammed software of Wi-Fi routers ASUS RT-AC86U and RT-AX56U allows a hacker to execute arbitrary code.

The vulnerability of ASUS’ Wi-Fi router software, RT-AC86U and RT-AX56U, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.385EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/09 12:00 a.m.12 views

The vulnerability of FortiWeb web applications’ network firewalls, related to the use of an uncontrolled format string, allows attackers to execute arbitrary code.

The vulnerability of FortiWeb web applications’ network firewalls is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

6.7CVSS7.5AI score0.00249EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/09 12:00 a.m.12 views

The vulnerability of the executable file GTWWebMonitor.exe in the SCADA system SCADA Data Gateway allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the GTWWebMonitor.exe executable in the SCADA system SCADA Data Gateway is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute arbitrary code by sending specially crafted...

8.5CVSS8.1AI score0.00706EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.11 views

The vulnerability of the Zyxel NBG-418N v2 Wi-Fi router’s microprogramming software, related to the use of uncontrolled format strings, allows a hacker to trigger a service failure.

The vulnerability of the microprogrammed Wi-Fi router Zyxel NBG-418N v2 lies in the use of uncontrolled format strings when processing binary files. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted packets...

6.8CVSS6.6AI score0.00788EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/11/16 12:00 a.m.20 views

The vulnerability of the RTSP-based microprogramming software for IP cameras such as VPort P16-1MP-M12, VPort P16-1MP-M12-IR, and VPort P06-1MP-M12 allows a intruder to cause a service failure.

The vulnerability of the RTSP microprogramming software-based IP camera models VPort P16-1MP-M12, VPort P16-1MP-M12-IR, and VPort P06-1MP-M12 lies in the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to cause service failure...

7.8CVSS5.5AI score
SaveExploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2022/11/11 12:00 a.m.20 views

PT-2022-5484 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 affected versions not specified Description: The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this iss...

7.8CVSS6.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:00 a.m.20 views

The vulnerability of NAS storage systems (Network Attached Storage) such as NAS326, NAS540, and NAS542 lies in the use of uncontrolled format strings, which allow attackers to execute arbitrary code.

The vulnerability of NAS storage systems Network Attached Storage such as NAS326, NAS540, and NAS542 is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created UDP packet...

10CVSS8.5AI score0.0157EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:00 a.m.12 views

The vulnerability of the sdp_media_set_lattr() function in the Wire Secure Messenger application, related to the use of uncontrolled format strings, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sdpmediasetlattr function in the Wire Secure Messenger messaging application is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

10CVSS8.2AI score0.03942EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:00 a.m.19 views

The vulnerability of ASUS RT-AX88U Wi-Fi router’s microprogramming software, related to the use of uncontrolled format strings, allows a hacker to execute arbitrary code.

The vulnerability of ASUS RT-AX88U Wi-Fi router’s microprogramming software is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.0266EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2022/05/16 12:00 a.m.21 views

ROS-20220516-10

A vulnerability in the evdevlogmsg function of the libinput library's implementation of the X.Org and Wayland display server protocols is related to the use of uncontrolled format strings. Wayland is related to the use of uncontrolled format strings. Exploitation of the vulnerability could allow ...

7.8CVSS8.3AI score0.00371EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/22 12:00 a.m.9 views

The vulnerability of the authentication/authorization module for the Apache mod_auth_openidc HTTP server, related to the use of uncontrolled format strings, allows a perpetrator to cause a service failure.

The vulnerability of the authentication/authorization module for the Apache modauthopenidc server is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.5CVSS6.6AI score0.02731EPSS
SaveExploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
added 2021/09/17 12:00 a.m.68 views

openSUSE 15 Security Update : apache2-mod_auth_openidc (openSUSE-SU-2021:1277-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1277-1 advisory. - modauthopenidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party...

7.5CVSS6.8AI score0.02731EPSS
SaveExploits1References13
BDU FSTEC
BDU FSTEC
added 2020/08/06 12:00 a.m.10 views

The vulnerability of the Varrcvr service in the PAN-OS operating system allows a perpetrator to trigger a service failure or execute arbitrary code with root privileges.

The vulnerability of the Varrcvr service in the PAN-OS operating system is related to the use of an uncontrolled format string. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or execute arbitrary code with root privileges...

9.3CVSS8.2AI score0.03451EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/06/05 12:00 a.m.26 views

Huawei Data Communication: Two Vulnerabilities of License Module in Some Huawei Products (huawei-sa-20171206-01-license)

There is a uncontrolled format string vulnerability when the license module of some Huawei products output the log information. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced...

5.5CVSS5.5AI score0.00207EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability of the String#unpack method in the Ruby programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the Stringunpack method in the Ruby programming language is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected by this method...

7.8CVSS6.7AI score0.0767EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.14 views

Multiple vulnerabilities exist in the functions cdio_log_handler (modules/access/cdda/access.c) of the CDDA plugin (libcdda_plugin), and in the cdio_log_handler and vcd_log_handler functions (modules/access/vcdx/access.c) of the VCDX plugin (libvcdx_plugin). These vulnerabilities allow an attacker to execute arbitrary code.

Multiple vulnerabilities exist in the functions cdiologhandler modules/access/cdda/access.c of the CDDA plugin libcddaplugin, and in the cdiologhandler and vcdloghandler functions modules/access/vcdx/access.c of the VCDX plugin libvcdxplugin of the VideoLAN VLC media player software. These...

6.8CVSS6AI score0.12061EPSS
SaveExploits5References8Affected Software2
Rows per page
Query Builder