Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Swi-prolog Clear all filters
TI-2017-12801 CVE-2017-17524 · GHSA-ccjx-r2j4-h5rc

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the…

Priority MEDIUM 41

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks vi…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0122 Published 2017-12-14 No fix listed CWE-74
TI-2012-05054 CVE-2012-6090 · GHSA-g9q5-wfrj-hfmv

Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in…

Priority LOW 39

Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0316 Published 2013-01-04 Will not fix CWE-119
TI-2012-05053 CVE-2012-6089 · GHSA-mvxf-4rwc-h287

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in…

Priority MEDIUM 40

Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly e…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04019 Published 2013-01-04 Will not fix CWE-119