A printf is called with a static format string.

A printf is called with a user supplied format string.

CVE-2014-0160: This is "heartbit", a redacted version of the portions of openssl-1.0.1f that cause the now infamous "heartbleed" exploit to expose private memory of any process running a exploitable version of openssl. It easily compiles & runs on many current unix / linux boxes, including cygwin...

CVE-2006-3389

CVE-2013-7233

CVE-2007-1894

CVE-2006-0985

CVE-2006-1796

CVE-2006-6808

CVE-2007-1622

CVE-2007-5105

CVE-2008-6508

CVE-2009-0496 (6)

CVE-2009-0496 (5)

CVE-2009-0496 (4)

CVE-2009-0496 (3)

CVE-2009-0496 (2)

CVE-2009-0496 (1)

CVE-2009-0497

CVE-2008-6509

CVE-2009-1596

CVE-2007-5120

jetty-6.1.16

CVE-2009-1523 and CVE-2009-1524

CVE-2009-4609