Lucene search
K

23 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-12207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such...

5.5CVSS5.2AI score0.00031EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.4 views

PT-2025-43867

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A flaw exists in Kamailio 5.5 within the Grammar Rule Handler component, specifically in the yyerror at function located in the src/core/cfg.y file. This issue can lead to a null pointer dereference. Exploitati...

5.5CVSS5.7AI score0.00031EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8982

Malware in sbrugna...

7.5CVSS6.9AI score0.01899EPSS
Exploits1References16
SUSE CVE
SUSE CVE
added 2023/02/15 5:31 a.m.2 views

SUSE CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

9.3CVSS7.3AI score0.06542EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:31 a.m.1 views

SUSE CVE-2014-1235

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978...

7.8CVSS7.5AI score0.00919EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:42 a.m.1 views

SUSE CVE-2017-11465

The parseryyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service invalid write or read or possibly have unspecified other impact via a crafted Ruby script, related to the parsertokaddutf8 function in parse.y. NOTE: this might have security relevance as a...

9.8CVSS9.5AI score0.00338EPSS
Exploits0References3
OSV
OSV
added 2017/08/07 8:29 p.m.1 views

DEBIAN-CVE-2014-1235

Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted file. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-0978...

7.8CVSS8.2AI score0.00919EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/20 12:0 a.m.2 views

Ruby UTF-8 Parser Denial of Service Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language. A security vulnerability in the 'parseryyerror' function of Ruby's UTF-8 parser allows remote attackers to exploit the vulnerability to submit a special request for a denial of service attack...

9.8CVSS9.1AI score0.00338EPSS
Exploits0References1
Debian
Debian
added 2014/12/11 4:26 p.m.28 views

[SECURITY] [DSA 3098-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3098-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 11, 2014 http://www.debian.org/security/faq -...

7.5CVSS6.2AI score0.01899EPSS
Exploits1
OSV
OSV
added 2014/12/11 12:0 a.m.23 views

DLA-105-1 graphviz - security update

Bulletin has no description...

7.5CVSS6.8AI score0.01899EPSS
Exploits1
OSV
OSV
added 2014/12/11 12:0 a.m.11 views

DSA-3098-1 graphviz - security update

Bulletin has no description...

7.5CVSS6.2AI score0.01899EPSS
Exploits1
OSV
OSV
added 2014/12/03 9:59 p.m.1 views

DEBIAN-CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.2AI score0.01899EPSS
Exploits1References1
NVD
NVD
added 2014/12/03 9:59 p.m.13 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.8AI score0.01899EPSS
Exploits1References10
Prion
Prion
added 2014/12/03 9:59 p.m.19 views

Format string

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.3AI score0.01899EPSS
Exploits1References10Affected Software1
Debian CVE
Debian CVE
added 2014/12/03 9:0 p.m.14 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.4AI score0.01899EPSS
Exploits1
Cvelist
Cvelist
added 2014/12/03 9:0 p.m.17 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.7AI score0.01899EPSS
Exploits1References10
UbuntuCve
UbuntuCve
added 2014/12/03 12:0 a.m.21 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.9AI score0.01899EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2014/12/03 12:0 a.m.2 views

PT-2014-8857 · At&T +1 · Graphviz +1

Name of the Vulnerable Software and Affected Versions: Graphviz affected versions not specified Description: The issue is related to a format string vulnerability in the yyerror function in lib/cgraph/scan.l of Graphviz. This vulnerability allows remote attackers to have an unspecified impact via...

7.5CVSS7AI score0.01899EPSS
Exploits1References25
Tenable Nessus
Tenable Nessus
added 2014/02/12 12:0 a.m.29 views

Fedora 19 : graphviz-2.30.1-12.fc19 (2014-0621)

This is an update that fixes CVE-2014-1235 and CVE-2014-1236. This is an update that fixes overflow in yyerror. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it a...

10CVSS6.8AI score0.07859EPSS
Exploits2References7
NVD
NVD
added 2014/01/10 5:55 p.m.14 views

CVE-2014-0978

Stack-based buffer overflow in the yyerror function in lib/cgraph/scan.l in Graphviz 2.34.0 allows remote attackers to have unspecified impact via a long line in a dot file...

9.3CVSS7.9AI score0.06542EPSS
Exploits1References12
Rows per page
Query Builder