CVE-2026-103436
- EPSS 0.29%
- Veröffentlicht 30.09.2026 15:38:48
- Zuletzt bearbeitet 02.10.2026 17:17:02
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, when the matched STATUS line has fewer than three whitespace-separated...
CVE-2026-103432
- EPSS 0.38%
- Veröffentlicht 30.09.2026 15:31:08
- Zuletzt bearbeitet 30.09.2026 20:17:31
apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.
CVE-2019-12584
- EPSS 2.56%
- Veröffentlicht 03.06.2019 03:29:00
- Zuletzt bearbeitet 21.11.2024 04:23:08
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.
CVE-2019-12585
- EPSS 5.03%
- Veröffentlicht 03.06.2019 03:29:00
- Zuletzt bearbeitet 21.11.2024 04:23:08
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php.
- EPSS 5.17%
- Veröffentlicht 03.03.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:01:31
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.