Skip to content
Noroxi

CWE-134 · 404 records

Use of Externally-Controlled Format String

CVEs in this class

404 records

  • CVE-2024-23113
    88Now

    A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, Fo

    CriticalCVSS 9.8KEVWeaponizedEPSS 61%

    fortinet · fortiproxyFeb 15, 2024

  • CVE-2019-1579
    76This week

    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or

    HighCVSS 8.1KEVWeaponizedEPSS 46%

    paloaltonetworks · pan-osJul 19, 2019

  • CVE-2020-3118
    69This week

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 11%

    cisco · ios xrFeb 5, 2020

  • CVE-2020-13160
    63This week

    AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.

    CriticalCVSS 9.8WeaponizedEPSS 80%

    anydesk · anydeskJun 9, 2020

  • CVE-2012-1851
    60This week

    Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi

    CriticalCVSS 10.0No exploitEPSS 65%

    microsoft · windows 7Aug 14, 2012

  • CVE-2023-22374
    56Plan

    iControl SOAP vulnerability

    HighCVSS 8.5No exploitEPSS 72%

    f5 · big-ip access policy managerFeb 1, 2023

  • CVE-2012-3569
    51Plan

    Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.

    CriticalCVSS 9.3WeaponizedEPSS 47%

    vmware · ovf toolNov 14, 2012

  • CVE-2018-6317
    49Plan

    The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, all

    CriticalCVSS 9.1WeaponizedEPSS 43%

    claymore dual miner project · claymore dual minerFeb 2, 2018

  • CVE-2009-4769
    48Plan

    Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to exec

    CriticalCVSS 9.3WeaponizedEPSS 37%

    jasper · httpdxApr 20, 2010

  • CVE-2012-2288
    47Plan

    Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote a

    CriticalCVSS 9.3WeaponizedEPSS 33%

    emc · networkerSep 4, 2012

  • CVE-2015-8617
    46Plan

    Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers t

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    php · phpJan 19, 2016

  • CVE-2010-1039
    46Plan

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCp

    CriticalCVSS 10.0Proof of conceptEPSS 20%

    ibm · aixMay 20, 2010

  • CVE-2008-3533
    46Plan

    Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attac

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    gnome · yelpAug 18, 2008

  • CVE-2011-1568
    46Plan

    Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    7t · igssApr 5, 2011

  • CVE-2011-0270
    45Plan

    Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execut

    CriticalCVSS 10.0No exploitEPSS 16%

    hp · openview network node managerJan 13, 2011

  • CVE-2009-3732
    45Plan

    Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    vmware · aceApr 12, 2010

  • CVE-2009-1210
    45Plan

    Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitra

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    wireshark · wiresharkApr 1, 2009

  • CVE-2009-3663
    44Plan

    Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of se

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    jasper · httpdxOct 11, 2009

  • CVE-2010-1550
    44Plan

    Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers

    CriticalCVSS 10.0No exploitEPSS 11%

    hp · openview network node managerMay 13, 2010

  • CVE-2006-0200
    43Plan

    Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to ex

    CriticalCVSS 9.3No exploitEPSS 19%

    php · phpJan 13, 2006

  • CVE-2006-1615
    43Plan

    Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute

    CriticalCVSS 10.0No exploitEPSS 11%

    clamav · clamavApr 6, 2006

  • CVE-2005-3656
    43Plan

    Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a Post

    CriticalCVSS 10.0No exploitEPSS 8%

    guiseppe tanzilli and matthias eckermann · mod auth pgsqlDec 31, 2005

  • CVE-2008-5982
    42Plan

    Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers

    CriticalCVSS 10.0No exploitEPSS 7%

    bmc · patrol agentJan 27, 2009

  • CVE-2007-5561
    42Plan

    Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, al

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · enterprise grid console serverOct 18, 2007

  • CVE-2008-0764
    42Plan

    Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might al

    CriticalCVSS 10.0Proof of conceptEPSS 7%

    larson software technology · network print serverFeb 13, 2008

All vulnerability classes