CWE-134: Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet fortiosA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and...6.1 Medium
- fortinet fortimanager, fortianalyzer, fortianalyzer-bigdata +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager...6.3 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0...8.3 High
- delskayn rquickjs, surrealdb +1 moreSurrealDB before 1.1.1 Format String via Scripting Functions9.0 Critical
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +25 more +27 moreA format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP...8.1 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex h series firmware +24 more +26 moreA format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch...5.7 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7...9.8 Critical
- gallagher controller 6000, controller 6000 firmware +1 moreA format string issue in the Controller 6000's optional diagnostic web interface can be used...7.5 High
- fortinet fortios, fortipam, fortiproxy +2 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...7.0 High
- wireapp wire-avs, wire audio\, video\, and signaling +1 morewire-avs remote format string vulnerability7.3 High
- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding use of externally-controlled format string is found in the cgi...9.8 Critical
- motorola mobile radio, mtm5400 firmware, mtm5500 firmware +2 moreFormat string vulnerability in AT+CTGL command in Motorola MTM50009.6 Critical
- asus rt-ax88u, rt-ax88u firmware +1 moreASUS RT-AX88U - externally-controlled format string8.8 High
- asus rt-ax55, rt-ax56u v2, rt-ac86u firmware +2 more +4 moreASUS RT-AX55、RT-AX56U_V2 - Format String - 37.2 High
- asus rt-ac86u, rt-ax55, rt-ax56u v2 +3 more +5 moreASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 27.2 High
- asus rt-ax55, rt-ax56u v2, rt-ac86u firmware +2 more +4 moreASUS RT-AX55、RT-AX56U_V2 - Format String - 17.2 High
- totolink n200re v5, n200re-v5 firmware +1 moreTOTOLINK N200RE V5 Validity_check format string8.8 High
- asus rt-ac86u, rt-ax56u v2, rt-ac86u firmware +1 more +3 moreASUS RT-AX56U V2 & RT-AC86U - Format String - 29.8 Critical
- asus rt-ac86u, rt-ax56u v2, rt-ac86u firmware +1 more +3 moreASUS RT-AX56U V2 & RT-AC86U - Format String -17.2 High
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +27 more +29 moreA format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2...8.8 High
- fortinet fortios, fortiproxy +1 moreA use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4,...6.3 Medium
- triangle microworks scada data gatewayOn Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can...8.2 High
- samsung android, samsung mobile devices +1 moreUse of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May...4.4 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated user may be able to trigger a denial of service of the XCC web user...6.3 Medium
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1...6.5 Medium
- git-for-windows git, git for windows project for windows, fedoraproject fedora +2 moreGit looks for localized messages in the wrong place3.3 Low
- d-link dir-1935, dlink dir-1935 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...6.8 Medium
- ayttm project ayttmayttm proxy.c http_connect format string5.0 Medium
- fortinet fortiwebA use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1,...6.5 Medium
- samsung android, samsung mobile devices +1 moreUse of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023...7.3 High
- ibm elastic storage system, spectrum scale +1 moreIBM Spectrum Scale denial of service6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreiControl SOAP vulnerability7.5 High
- sslh project sslhsslh Packet Dumping probe.c hexdump format string5.6 Medium
- multimon-ng project multimon-ngmultimon-ng demod_flex.c add_ch format string5.5 Medium
- wiresharkCrash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via...6.3 Medium
- pingcap pingcap/tidb, tidb +1 moreUse of Externally-Controlled Format String in pingcap/tidb4.2 Medium
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the web interface /action/wirelessConnect...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the web interface /action/wirelessConnect...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the web interface /action/wirelessConnect...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the web interface /action/wirelessConnect...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode...7.1 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode...7.1 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode...7.1 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the UPnP logging functionality of Abode...7.1 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreFour format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode...8.2 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreA format string injection vulnerability exists in the XCMD getVarHA functionality of abode...9.8 Critical
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreA format string injection vulnerability exists in the ghome_process_control_packet functionality...8.2 High
- Show moreLoading…