CWE-134: Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sybase onebridge mobile data suiteFormat string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail...10.0 High
- eximFormat string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before...7.5 High
- 7t igssFormat string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00...10.0 High
- realnetworks helix mobile server, helix server +1 moreFormat string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and...10.0 High
- apple applescript, mac os x, mac os x server +2 moreMultiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow...6.8 Medium
- phpMultiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and...7.5 High
- hp openview network node managerFormat string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51...10.0 High
- apple mac os x, mac os x server +1 moreFormat string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in...6.8 Medium
- phpFormat string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows...6.8 Medium
- kvircMultiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have...10.0 High
- apple mac os x, mac os x server +1 moreMultiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10...6.8 Medium
- accoria rock web serverFormat string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7...7.5 High
- phpMultiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow...6.8 Medium
- ibm aix, vios, sgi irix +1 more +3 moreFormat string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and...10.0 High
- hp openview network node managerFormat string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7...10.0 High
- vmware ace, player, server +1 more +3 moreVMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in...5.0 Medium
- ipswitch ws ftpFormat string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote...4.3 Medium
- jasper httpdxMultiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b,...9.3 High
- vmware fusion, player, server +2 more +4 moreFormat string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5...7.2 High
- vmware ace, player, server +1 more +3 moreFormat string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc)...10.0 High
- iscsitarget, zaal tgt +1 moreMultiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or...5.0 Medium
- debian lintianMultiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1...7.5 High
- sun java system web serverFormat string vulnerability in the WebDAV implementation in webservd in Sun Java System Web...7.5 High
- tatsuhiro tsujikawa aria2Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in...7.6 High
- vmware ace, player, server +1 more +3 moreVMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in...5.0 Medium
- jasper httpdxFormat string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4...10.0 High
- phpThe popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when...5.0 Medium
- microsoft enterprise libraryBlocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns &...5.0 Medium
- white dune duneMultiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact...10.0 High
- silcnet silc client, silc toolkit +1 moreMultiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live...7.5 High
- silcnet silc client, silc toolkit +1 moreMultiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live...7.5 High
- silcnet silc toolkitThe silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server...5.8 Medium
- silcnet silc toolkitThe silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live...5.8 Medium
- memcode i.scribeFormat string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows...9.3 High
- 2kgames vietcong 2Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10...9.3 High
- apple mac os x, mac os x server +1 moreFormat string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8...7.5 High
- bistudio arma, arma 2 +1 moreFormat string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and...10.0 High
- mysqlMultiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...8.5 High
- sambaMultiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2...9.3 High
- fortinet forticlientFormat string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local...7.2 High
- ezbsystems ultraisoMultiple format string vulnerabilities in UltraISO 9.3.1.2633, and possibly other versions before...9.3 High
- wiresharkFormat string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier...10.0 High
- imatix xitamiMultiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly...10.0 High
- imatix xitamiFormat string vulnerability in Xitami Web Server 2.2a through 2.5c2, and possibly other versions,...10.0 High
- citadel webcitFormat string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other...7.5 High
- symantec pcanywhereFormat string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and...4.6 Medium
- epicgames unreal engineFormat string vulnerability in the Epic Games Unreal engine client, as used in multiple games,...9.3 High
- 3com wireless 8760 dual-radioThe web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows...7.8 High
- phpPHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify...2.1 Low
- wiresharkFormat string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows...2.1 Low
- Show moreLoading…