Fedora: Security Advisory for vim (FEDORA-2022-48b86d586f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for vim (FEDORA-2022-20e66c6698)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-0156

It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in user functions. A specially crafted file could crash the vim process or possibly lead to other undefined behaviors...

CVE-2022-0156

creationtimestamp| type| source ---|---|--- 2022-01-10 18:14:46+00:00| seen| https://t.me/cibsecurity/35179...

CVE-2022-0156

vim is vulnerable to Use After Free...

ALPINE-CVE-2022-0156

vim is vulnerable to Use After Free...

CVE-2022-0156

vim is vulnerable to Use After Free...

CVE-2022-0156

vim is vulnerable to Use After Free...

CVE-2022-0156

CVE-2022-0156 is a Vim memory‑corruption vulnerability described as a Use‑After‑Free. Connected documents confirm Vim vulnerabilities across multiple vendors/advisories, e.g. USN-6195-1 (Cloud Foundry) and Amazon Linux ALAS2023-2023-098, and Apple security updates listing Vim issues including CVE...

CVE-2022-0156

vim is vulnerable to Use After Free...

CVE-2022-0156 Use After Free in vim/vim

vim is vulnerable to Use After Free...

SUSE: Security Advisory (SUSE-SU-2021:0156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : dnsmasq (RHSA-2021:0156)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0156 advisory. The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server...

CVE-2020-0156

CVE-2020-0156 affects Android 10 and points to an out-of-bounds read in the NxpNfc::ioctl path of NxpNfc.cpp caused by a missing bounds check. The issue enables local information disclosure with user privileges; exploitation does not require user interaction but is local in nature. CVSS metrics i...

RHEL 6 : Ruby on Rails (RHSA-2013:0153)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0153 advisory. Ruby on Rails is a modelviewcontroller MVC framework for web application development. Action Pack implements the controller and the view components...

Critical Photon OS Security Update - PHSA-2018-0156

Updates of 'redis' packages of Photon OS have been released...

Security Bulletin: Persistent cross-site scripting vulnerability in Process Admin Console affecting IBM Business Process Manager (BPM) and WebSphere Lombardi Edition (WLE) CVE-2015-0156

Summary IBM Business Process Manager is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the...

CVE-2018-0156

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to improper validation of packet data. A...

CVE-2018-0156

CVE-2018-0156 concerns Cisco IOS/IOS XE Smart Install DoS. The vulnerability arises from improper validation of Smart Install packet data, allowing an unauthenticated, remote attacker to trigger a device reload via a crafted packet sent to TCP port 4786. Affected are Cisco devices configured as S...

GHSA-PCHC-949F-53M5 Improper Input Validation in multi_xml

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...