CWE-134: Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sonicwall sonicosA post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a...4.9 Medium
- qnap qsync centralQsync Central0.6 Low
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6...6.7 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in...2.7 Low
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet/mlx5: fw_tracer, Validate format string parameters7.0 High
- n8nn8n has a Webhook Node IP Whitelist Bypass via Partial String Matching5.3 Medium
- cmu panda3dPanda3D <= 1.10.16 egg-mkfont Format String Information Disclosure5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero1.2 Low
- sound4 linkandshare transmitterSOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow9.3 Critical
- revive adserver, revive-adserver revive adserver +1 moreImproper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1...2.7 Low
- planet wgr-500, wgr-500 firmware +1 moreA format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1...8.8 High
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- ibm webmethods integrationIBM webMethods Integration code execution7.5 High
- wm downloader downloaderWM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File8.4 High
- imagemagickImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution7.5 High
- flexbyte software solar ftp serverSolar FTP Server <= 2.1.1 Malformed USER Denial of Service8.7 High
- comsndftp ftp serverComSndFTP v1.3.7 Beta USER Format String RCE9.3 Critical
- sonicwall sonicosUse of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows...9.8 Critical
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...7.2 High
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...9.8 Critical
- qnap qsync centralQsync Central2.3 Low
- freescoutFreeScout Has Insufficient Protection Against CRLF-injection7.0 High
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...7.0 High
- No product listedAn XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for...5.5 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...6.3 Medium
- lmfit astevalASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape8.4 High
- sonicwall sonicosA post-authentication format string vulnerability in SonicOS management allows a remote attacker...7.2 High
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- zabbix frontend, zabbix +1 moreJS - Internal strings in HTTP headers9.1 Critical
- qnap qts, quts hero +1 moreQTS, QuTS hero7.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero7.7 High
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero2.1 Low
- zend serverFormat String Injection in Zend Server9.3 Critical
- fortinet fortianalyzer, fortianalyzer cloud +1 moreA use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4...6.8 Medium
- juniper junos, junos os +1 moreJunos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash8.7 High
- moxa oncell g3150a-lte series, oncell g3470a-lte-eu-t firmware, oncell g3470a-lte-eu firmware +3 more +5 moreOnCell G3470A-LTE Series: Authenticated Format String Errors6.3 Medium
- actiontec wcb6200q, wcb6200q firmware +1 moreActiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: iwlwifi: dbg-tlv: ensure NUL termination9.1 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...6.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,...6.2 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability3.3 Low
- merative merge dicom toolkit c/c++, merge dicom toolkit c c\+\+ +1 moreUse of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows....5.7 Medium
dmitryDebianDMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a...8.4 High- Show moreLoading…