SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:0781-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0781-1 advisory. - CVE-2023-0512: Fixed a divide By Zero bsc1207780. - CVE-2023-1175: vim: an incorrect calculati...

SUSE-SU-2023:0781-1 Security update for vim

This update for vim fixes the following issues: - CVE-2023-0512: Fixed a divide By Zero bsc1207780. - CVE-2023-1175: vim: an incorrect calculation of buffer size bsc1208957. - CVE-2023-1170: Fixed a heap-based Buffer Overflow bsc1208959. - CVE-2023-1127: Fixed divide by zero in scrolldown...

CLSA-2023-1678820270 vim: Fix of CVE-2023-1175

CVE-2023-1175: make sure "startspaces" is not negative...

CVE-2023-1175

creationtimestamp| type| source ---|---|--- 2023-03-04 18:36:05+00:00| seen| Telegram/xbirfDfq2A2vYcUh-ZGx4jZPNnRypUuvjExkk7zGx-boR4...

CVE-2023-1175 vulnerabilities

Vulnerabilities for packages: vim...

CVE-2023-1175 vulnerabilities

Vulnerabilities for packages: vim...

CVE-2023-1175

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378...

CVE-2023-1175

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378...

CVE-2023-1175

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378...

CVE-2023-1175

CVE-2023-1175 affects vim/vim prior to 9.0.1378, where a miscalculation of buffer size during virtual editing can lead to out-of-bounds access and a crash. Public mentions across advisories/notes show fixes in newer vim versions (e.g., Debian LTS advisory DLA-3453-1 and DLA-4097-1 reference CVE-2...

SUSE CVE-2012-1175

Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SWF file, which triggers a heap-based buffer overflow...

GitLab Community and Enterprise Cross-Site Scripting (CVE-2022-1175)

A cross-site scripting vulnerability exists in GitLab Community and Enterprise Editions. The vulnerability is due to improper sanitization of user input submitted in notes...

GitLab 14.4 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1433)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing...

CVE-2022-1433

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS...

Cross site scripting

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS...

Gitlab 14.9 Cross Site Scripting

Exploit Title: Gitlab Stored XSS Date: 12/04/2022 Exploit Authors: Greenwolf & stacksmashing Vendor Homepage: https://about.gitlab.com/ Software Link: https://about.gitlab.com/install Version: GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions...

GitLab 14.9 - Stored Cross-Site Scripting (XSS)

Exploit Title: Gitlab Stored XSS Date: 12/04/2022 Exploit Authors: Greenwolf Vendor Homepage: https://about.gitlab.com/ Software Link: https://about.gitlab.com/install Version: GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9...

GitLab 14.9 - Stored Cross-Site Scripting Vulnerability

Exploit Title: Gitlab Stored XSS Exploit Authors: Greenwolf & stacksmashing Vendor Homepage: https://about.gitlab.com/ Software Link: https://about.gitlab.com/install Version: GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9...

GitLab 14.4 < 14.7.7 / 14.8 < 14.8.5 / 14.9 < 14.9.2 (CVE-2022-1175)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to...

CVE-2022-1175

Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes...