Lucene search
+L

27 matches found

RedhatCVE
RedhatCVE
•added 2026/02/04 1:20 p.m.•14 views

CVE-2026-0383

A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...

8.2CVSS5.4AI score0.0021EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•1 views

CVE-2026-0383: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...

8.2CVSS5.8AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-7383

Malware in sbrugna...

6.5CVSS6.5AI score0.00703EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 4:23 p.m.•19 views

CVE-2020-15388

A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files...

6.5CVSS7AI score0.00703EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/11/15 12:00 a.m.•60 views

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-431)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-431 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

5.5CVSS6.2AI score0.00366EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2023/11/02 12:00 a.m.•29 views

Vim < 9.0.2068 Use After Free

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...

5.5CVSS6.6AI score0.00366EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
•added 2023/10/30 7:00 a.m.•9 views

Integer Overflow in :history command in Vim

...

5.5CVSS7AI score0.00366EPSS
SaveExploits1
Cvelist
Cvelist
•added 2023/10/27 6:36 p.m.•82 views

CVE-2023-46246 Integer Overflow in :history command in Vim

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...

4CVSS6.4AI score0.00366EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2023/10/27 6:36 p.m.•7 views

CVE-2023-46246 Integer Overflow in :history command in Vim

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...

4CVSS6.4AI score0.00366EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/10/27 12:00 a.m.•7 views

PT-2023-6503

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2068 Description The issue is caused by a heap-use-after-free in memory allocated in the function ga grow inner and an integer overflow when using the :history command. This can potentially lead to a denial of service...

5.5CVSS5.8AI score0.00366EPSS
SaveExploits1References78
SUSE CVE
SUSE CVE
•added 2023/02/15 4:19 a.m.•10 views

SUSE CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6AI score0.01496EPSS
SaveExploits1References5
OSV
OSV
•added 2022/03/18 6:15 p.m.•11 views

CVE-2020-15388

A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files...

6.5CVSS5.9AI score0.00703EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•3 views

CVE-2020-15388: Undefined Security Weakness

A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files...

6.5CVSS6.7AI score0.00703EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/24 2:05 p.m.•13 views

OPENSUSE-SU-2021:1087-1 Security update for crmsh

This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node bsc1187553 - Fix: history: use Path.mkdir instead of mkdir commandbsc1179999, CVE-2020-35459 - Dev: crashtest: Add...

7.8CVSS7.7AI score0.00681EPSS
SaveExploits1References8
OSV
OSV
•added 2021/07/21 9:57 a.m.•7 views

OPENSUSE-SU-2021:2435-1 Security update for crmsh

This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node bsc1187553 - Fix: history: use Path.mkdir instead of mkdir commandbsc1179999, CVE-2020-35459 - Dev: crashtest: Add...

7.8CVSS7.7AI score0.00681EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/05/17 12:00 a.m.•17 views

Brocade Fabric OS安全漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS has a security vulnerability that can be exploited by an attacker to bypass access restrictions via History Command of Brocade Fabric OS in order to alter...

6.5CVSS6.9AI score0.00818EPSS
SaveExploits0References5
Veracode
Veracode
•added 2018/06/27 9:08 a.m.•27 views

Cross-Site Scripting (XSS)

qutebrowser is vulnerable to cross-site scripting attacks. The attacks exists in the history command, qute://history page through which an attacker can inject malicious Javascript to steal a user's browsing history when the user visits a page with an html input element as it's title...

6.1CVSS5.9AI score0.01496EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2018/06/26 4:29 p.m.•22 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS6AI score
SaveExploits0References3
OSV
OSV
•added 2018/06/26 4:29 p.m.•7 views

DEBIAN-CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS8.2AI score0.01496EPSS
SaveExploits1References1
NVD
NVD
•added 2018/06/26 4:29 p.m.•33 views

CVE-2018-1000559

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

6.1CVSS7.2AI score0.01496EPSS
SaveExploits1References3
Rows per page
Query Builder