CWE-134 · Memory Corruption
Use of Externally-Controlled Format String
417CVEs
SortMost likely exploited
417 CVEs with CWE-134 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-23113In CISA KEVExploitedA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2,…Fortinet · FortiSwitchManager · CVSS 9.8 · 2024-02-15 | 9.8 | 62% | 2024-02-15 |
| CVE-2019-1579In CISA KEVExploitedRemote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled…Palo Alto Networks · Palo Alto Networks GlobalProtect Portal/Gateway Interface · CVSS 8.1 · 2019-07-19 | 8.1 | 44% | 2019-07-19 |
| CVE-2020-3118In CISA KEVExploitedCisco IOS XR Software Cisco Discovery Protocol Format String VulnerabilityCisco · Cisco IOS XR Software · CVSS 8.8 · 2020-02-05 | 8.8 | 12% | 2020-02-05 |
| CVE-2020-13160AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.Anydesk · Anydesk · 2020-06-09 | – | 81% | 2020-06-09 |
| CVE-2023-22374iControl SOAP vulnerabilityF5 · BIG-IP · CVSS 7.5 · 2023-02-01 | 7.5 | 71% | 2023-02-01 |
| CVE-2012-1851Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,…Microsoft · Windows 7 · 2012-08-15 | – | 66% | 2012-08-15 |
| CVE-2012-3569Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assi…Vmware · Ovf Tool · 2012-11-14 | – | 48% | 2012-11-14 |
| CVE-2018-6317The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory o…Claymore Dual Miner Project · Claymore Dual Miner · 2018-02-02 | – | 44% | 2018-02-02 |
| CVE-2023-35086ASUS RT-AX56U V2 & RT-AC86U - Format String -1ASUS · RT-AX56U V2 · CVSS 7.2 · 2023-07-21 | 7.2 | 39% | 2023-07-21 |
| CVE-2009-4769Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string sp…Jasper · Httpdx · 2010-04-20 | – | 38% | 2010-04-20 |
| CVE-2012-2288Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via…Emc · Networker · 2012-09-04 | – | 33% | 2012-09-04 |
| CVE-2014-1683The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers t…Skybluecanvas · Skybluecanvas · 2014-01-29 | – | 31% | 2014-01-29 |
| CVE-2006-3469Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a f…Mysql · Mysql · 2006-07-18 | – | 31% | 2006-07-18 |
| CVE-2015-8617Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format str…Php · Php · 2016-01-19 | – | 23% | 2016-01-19 |
| CVE-2006-0200Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string…Php · Php · 2006-01-13 | – | 20% | 2006-01-13 |
| CVE-2008-3533Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via form…Gnome · Yelp · 2008-08-18 | – | 19% | 2008-08-18 |
| CVE-2011-1568Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SC…7t · Igss · 2011-04-05 | – | 19% | 2011-04-05 |
| CVE-2010-1039Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX…Ibm · Vios · 2010-05-20 | – | 19% | 2010-05-20 |
| CVE-2011-0270Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string spec…Hp · Openview Network Node Manager · 2011-01-13 | – | 16% | 2011-01-13 |
| CVE-2009-3732Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.Vmware · Ace · 2010-04-12 | – | 16% | 2010-04-12 |
| CVE-2009-1210Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format…Wireshark · Wireshark · 2009-04-01 | – | 15% | 2009-04-01 |
| CVE-2009-3663Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code…Jasper · Httpdx · 2009-10-11 | – | 15% | 2009-10-11 |
| CVE-2008-3734Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or pos…Ipswitch · Ws Ftp Home · 2008-08-20 | – | 14% | 2008-08-20 |
| CVE-2010-2094Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possib…Php · Php · 2010-05-27 | – | 13% | 2010-05-27 |
| CVE-2007-5184Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory n…Smbftpd · Smbftpd · 2007-10-03 | – | 12% | 2007-10-03 |
| CVE-2007-5740The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbitrary code via an IMAP tag with a null b…Vergenet · Perdition Mail Retrieval Proxy · 2007-10-31 | – | 12% | 2007-10-31 |
| CVE-2007-0017Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cdio_log_handler and (…Videolan · Vlc Media Player · 2007-01-03 | – | 12% | 2007-01-03 |
| CVE-2009-1886Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format s…Samba · Samba · 2009-06-24 | – | 12% | 2009-06-24 |
| CVE-2006-1615Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, i…Clamav · Clamav · 2006-04-06 | – | 12% | 2006-04-06 |
| CVE-2009-3707VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, V…Vmware · Ace · 2009-10-16 | – | 11% | 2009-10-16 |
| CVE-2004-0179Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote mal…Webdav · Neon · 2004-04-16 | – | 11% | 2004-04-16 |
| CVE-2010-1550Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format s…Hp · Openview Network Node Manager · 2010-05-13 | – | 11% | 2010-05-13 |
| CVE-2004-0777Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote atta…Inter7 · Courier-Imap · 2004-08-19 | – | 11% | 2004-08-19 |
| CVE-2013-5135Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via form…Apple · Apple Remote Desktop · 2013-10-24 | – | 11% | 2013-10-24 |
| CVE-2013-2131Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string sp…Rrdtool Project · Rrdtool · 2015-01-04 | – | 11% | 2015-01-04 |
| CVE-2009-2446Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause…Mysql · Mysql · 2009-07-13 | – | 11% | 2009-07-13 |
| CVE-2007-0646Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via f…Apple · Imovie · 2007-02-01 | – | 10% | 2007-02-01 |
| CVE-2006-0705Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection…F-Secure · F-Secure Ssh Server · 2006-02-15 | – | 10% | 2006-02-15 |
| CVE-2017-0898Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer…HackerOne · Ruby · 2017-09-15 | – | 9.7% | 2017-09-15 |
| CVE-2007-0051Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast w…Apple · Iphoto · 2007-01-04 | – | 9.3% | 2007-01-04 |
| CVE-2008-5660Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to exec…Gnome · Vinagre · 2008-12-17 | – | 9.1% | 2008-12-17 |
| CVE-2005-3656Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a PostgreSQL database, allows remote unauthen…Guiseppe Tanzilli And Matthias Eckermann · Mod Auth Pgsql · 2006-01-06 | – | 8.9% | 2006-01-06 |
| CVE-2008-1055Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (d…Netwin · Surgemail · 2008-02-27 | – | 7.9% | 2008-02-27 |
| CVE-2008-5982Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP po…Bmc · Patrol Agent · 2009-01-27 | – | 7.8% | 2009-01-27 |
| CVE-2006-2480Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, a…Dia · Dia · 2006-05-19 | – | 7.8% | 2006-05-19 |
| CVE-2007-5561Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitr…Oracle · Enterprise Grid Console Server · 2007-10-18 | – | 7.7% | 2007-10-18 |
| CVE-2018-8778In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, an attacker controlling the unpacking format (similar to format string vulne…Ruby-Lang · Ruby · 2018-04-03 | – | 7.5% | 2018-04-03 |
| CVE-2007-5248Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster…Id Software · Doom 3 · 2007-10-06 | – | 7.5% | 2007-10-06 |
| CVE-2008-0764Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier for Windows might allow remote attackers to execute arbitra…Larson Software Technology · Network Print Server · 2008-02-13 | – | 7.4% | 2008-02-13 |
| CVE-2014-6262Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or…Zenoss · Zenoss Core · 2020-02-12 | – | 7.2% | 2020-02-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.