Lucene search
K

7 matches found

Snyk
Snyk
added 2025/03/03 5:41 p.m.2 views

Origin Validation Error

Overview rembg is a Remove image background Affected versions of this package are vulnerable to Origin Validation Error in the addmiddleware function in scommand.py, which reflects all origins by default. Due to the allowcredentials=True setting, an attacker can send authenticated cross-site...

8.7CVSS6.2AI score0.00179EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2024/04/01 12:0 a.m.4 views

The vulnerability of the Vim text editor, related to integer overflow or bypassing, allows attackers to cause a service failure.

The vulnerability of the Vim text editor lies in the fact that the values used for the :s command are stored more than is necessary for a single long variable. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

5CVSS6.4AI score0.00749EPSS
Exploits0References7Affected Software3
NVD
NVD
added 2023/11/22 10:15 p.m.29 views

CVE-2023-48706

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

4.7CVSS0.00441EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2023/11/21 2:19 a.m.3 views

SUSE CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

2.8CVSS6.9AI score0.00749EPSS
Exploits0References6
Microsoft CVE
Microsoft CVE
added 2023/11/20 8:0 a.m.2 views

overflow with count for :s command in vim

...

4.3CVSS7AI score0.00749EPSS
Exploits0
CNNVD
CNNVD
added 2023/11/16 12:0 a.m.3 views

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2108, which stems from the fact that the program may abort if the count after the s command is greater than the count of a long integer variable...

4.3CVSS6.9AI score0.00749EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2021/01/26 12:0 a.m.227 views

CVE-2021-3156 "Baron Samedit"

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character. Recent assessments: cdelafuente-r7 at January 27, 2021 3:40pm UTC...

8.4CVSS8.9AI score0.99305EPSS
In wildExploits86References39
Rows per page
Query Builder