CWE-134: Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 moreRabbitMQ Web Management Plugin DoS via heap overflow4.5 Medium
- gnu gnusoundgnusound 0.7.5 has format string issue9.8 Critical
- thunar, debian linux, opensuse +2 moreThunar 1.2 through 1.2.1 could crash when copy and pasting a file name with % format characters...7.8 High
- libpoe-component-irc-perl, debian linux, fedoraproject fedora +2 morelibpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can...9.8 Critical
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.5 Medium
- schneider electric se u.motion server, schneider-electric meg6260-0410 firmware, meg6260-0415 firmware +2 more +4 moreA Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX...9.8 Critical
- cpanelcPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).8.8 High
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the DCV check_domains_via_dns...3.3 Low
- cpanelMaketext in cPanel before 78.0.2 allows format-string injection in the Email store_filter UAPI ...3.3 Low
- palo alto networks pan-osRemote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2...8.1 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL HTTP server mishandles format strings in a username or cookie during the...8.8 High
- abb pb610 panel builder 600 firmwareThe ABB IDAL FTP server mishandles format strings in a username during the authentication process...8.8 High
- ncurses project ncursesBuffer overflow and format vulnerabilities in ncurses9.8 Critical
- ncurses project ncursesMishandling of format strings in ncurses7.5 High
- pancurses project pancursesFormat string vulnerabilities in pancurses7.5 High
- motorola cx2 firmware, m2 firmware +1 moreAn issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an...9.8 Critical
- asus rt-ac3200 firmwareFormat string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows...8.1 High
- palletsprojects jinjaJinja2 sandbox escape vulnerability8.6 High
- ghs integrity rtosAn issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5...7.5 High
- ghs integrity rtosAn issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on...7.5 High
- ghs integrity rtosAn issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5...7.5 High
- fortinet fortiosA format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized...9.8 Critical
- gluster glusterfs, debian linux, redhat enterprise linux server +3 more +5 moreIt was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8...6.5 Medium
- freedesktop udisks, canonical ubuntu linux +1 moreUDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing...7.8 High
- jhead project jheadThe ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to...7.8 High
- pulsesecure pulse secure desktop clientThe Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.5.5 Medium
- philips pagewriter tc10, tc20, tc30, tc50, tc70 cardiographs, pagewriter tc10 firmware, pagewriter tc20 firmware +3 more +5 moreIn Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018,...3.7 Low
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could...8.4 High
- ui edgeswitch firmwareUbiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format...7.2 High
- secure-compare project secure-compare, hackerone secure-compare node module +1 moreInsecure Comparison in secure-compare5.3 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...7.5 High
- cisco ios, ios xe, ios xr +1 more +3 moreFormat String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS...8.0 High
- openvpn** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in...9.1 Critical
- shapeshift keepkey firmwareFormat String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information...7.5 High
- huawei vp9660, vp9660 firmware +1 moreHuawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module...5.5 Medium
- fmtfmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85)...7.5 High
- perforce puppet enterprise, puppet enterprise, puppetlabs/apache +4 more +6 morePuppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a...8.0 High
- claymore dual miner project dual minerThe remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an...9.1 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- openocd open on-chip debugger, debian linux +1 moreOpen On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data...9.6 Critical
- irssi, debian linux +1 moreWhen using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of...7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreWhen using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.7.5 High
- yajl-ruby project yajl-ruby, debian linux +1 moreyajl-ruby gem Denial of Service vulnerability7.5 High
- [unknown] ceph, debian linux +1 moreIn Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user...2.3 Low
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash....7.5 High
- ovirt ovirt-nodeovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0...8.8 High
- hackerone rubyRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Critical
- Show moreLoading…