Lucene search
+L

1313 matches found

OSV
OSV
•added 2024/09/02 6:15 p.m.•7 views

DEBIAN-CVE-2024-45306

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

5.5CVSS5AI score0.00298EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/09/02 6:15 p.m.•39 views

CVE-2024-45306

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

5.5CVSS6.2AI score0.00298EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/02 6:15 p.m.•21 views

UBUNTU-CVE-2024-45306

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

5.5CVSS6.1AI score0.00298EPSS
SaveExploits0References5
OSV
OSV
•added 2024/09/02 4:35 p.m.•29 views

CVE-2024-45306 heap-buffer-overflow in Vim

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

4.5CVSS4.3AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/09/02 4:35 p.m.•27 views

CVE-2024-45306

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

5.5CVSS5AI score0.00298EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/09/02 4:35 p.m.•37 views

CVE-2024-45306 heap-buffer-overflow in Vim

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

4.5CVSS0.00298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/09/02 12:00 a.m.•14 views

PT-2024-31559 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.0707 Description: Vim is an open source, command line text editor. A change in how the cursor position is calculated, made in patch v9.1.0038, removed a loop that verified the cursor position always points inside a...

5.5CVSS5.1AI score0.00541EPSS
SaveExploits1References75
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/02 12:00 a.m.•3 views

CVE-2024-45306: Heap-based Buffer Overflow

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing beyond the end of a line. Back then we assumed this loop ...

5.5CVSS5.5AI score0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/28 12:00 a.m.•4 views

CVE-2024-42698: Improper Validation of Array Index

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

5.3CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/28 12:00 a.m.•6 views

CVE-2024-41565: Improper Validation of Array Index

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

5.3CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Mend
Mend
•added 2024/08/28 12:00 a.m.•4 views

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

5.3CVSS0.00311EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/26 11:15 a.m.•34 views

UBUNTU-CVE-2024-43914

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUGON can be triggerred by the test:...

5.5CVSS6.2AI score0.00227EPSS
SaveExploits0References32
Vulnrichment
Vulnrichment
•added 2024/08/26 10:11 a.m.•18 views

CVE-2024-43914 md/raid5: avoid BUG_ON() while continue reshape after reassembling

In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUGON while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUGON can be triggerred by the test:...

7AI score0.00227EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/24 12:00 a.m.•2 views

CVE-2024-8136: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort1user.php. The manipulation of the argument position leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS3.8AI score0.00426EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•19 views

SourceCodester Online Graduate Tracer System 跨站脚本漏洞

SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. A cross-site scripting...

5.4CVSS4.4AI score0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•4 views

CVE-2024-7844: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admin/addacc.php. The manipulation of the argument name/user/position leads to cross site scripting. T...

5.4CVSS3.6AI score0.00478EPSS
SaveExploits1References1
CVE
CVE
•added 2024/08/13 6:12 p.m.•73 views

CVE-2024-7570

CVE-2024-7570 affects Ivanti ITSM on-prem and Neurons for ITSM (versions 2023.4 and earlier). The root cause is improper certificate validation, enabling a remote attacker in a network-positioned MITM to craft a token that grants access to ITSM as any user. The vulnerability is rated HIGH on both...

8.3CVSS7.1AI score0.00575EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/08/13 6:12 p.m.•50 views

CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user...

8.3CVSS0.00575EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/13 8:15 a.m.•34 views

CVE-2024-41681

A vulnerability has been identified in Location Intelligence family All versions V4.4. The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connectio...

7.5CVSS0.00161EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2024/08/08 4:56 p.m.•17 views

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5130217826353152 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

5.9AI score
SaveExploits0
Rows per page
Query Builder