Read the docs

Swi-prolog

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Swi-prolog records in CISA KEV

No Swi-prolog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Swi-prolog · all components

Priority MEDIUM 41

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks vi…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0122 Published 2017-12-14 No fix listed CWE-74
Priority MEDIUM 40

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly e…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04019 Published 2013-01-04 Will not fix CWE-119
Priority LOW 39

Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0316 Published 2013-01-04 Will not fix CWE-119
Open these records in search →