Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-116 advisory. A heap buffer over-read vulnerability was found in Vim's grabfilename function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with gf...

Ubuntu 16.04 ESM : Vim vulnerability (USN-5533-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5533-1 advisory. It was discovered that Vim incorrectly handled memory access. If a user were tricked into opening a specially crafted file, an attacker could possibly use this...

CVE-2022-2129 affecting package vim for versions less than 8.2.5172-1

CVE-2022-2129 affecting package vim for versions less than 8.2.5172-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2129

CVE-2022-2129 affects vim/vim with an out-of-bounds write in the codebase prior to 8.2. Debian and Debian LTS advisories (DLA-3204-1, DLA-4097-1) note fixes in vim packages: Debian 10 up to 8.1.0875-5+deb10u4 and Debian 11 via vim-9.x packages (e.g., 2:8.2.2434-3+deb11u3). Astra/Cloud Foundry ref...

CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2129 Out-of-bounds Write in vim/vim

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

RHEL 8 : lynx (RHSA-2022:2129)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:2129 advisory. Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags. Security Fixes: lyn...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0630-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0630-1 Rating: important References: 1181197 1181198 1183125 1183329 1184542 Cross-References: CVE-2021-2074 CVE-2021-2129 CVE-2021-2264 CVSS scores: CVE-2021-2074 NVD : 8.2...

openSUSE Security Update : virtualbox (openSUSE-2021-165)

This update for virtualbox fixes the following issues : Version update to 6.1.18 released January 19 2021 This is a maintenance release. The following items were fixed and/or added : - Nested VM: Fixed hangs when executing SMP nested-guests under certain conditions on Intel hosts bug 19315, 19561...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0165-1 Rating: important References: 1181197 1181198 Cross-References: CVE-2021-2074 CVE-2021-2129 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Descriptio...

Oracle VirtualBox Security Updates (cpujan2021) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Vulnerabilities fixed in Oracle Virtualization

Vulnerabilities have been fixed in Oracle Virtualization/Virtualbox. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

CVE-2021-2129

CVE-2021-2129 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.1.18. The vulnerability allows a local, highly privileged attacker with logon to the host to compromise VirtualBox, potentially leading to unauthorized access to data or data modification. The base CVSS v3.1 score...

Debian DLA-2129-1 : firebird2.5 security update

An issues has been found in firebird2.5, an RDBMS based on InterBase 6.0. As UDFs can be used for a remote authenticated code execution as user firebird, UDFs have been disabled in the default configuration which will be used for new installations there is no change for existing configurations,...

CVE-2020-2129

CVE-2020-2129 affects Jenkins Eagle Tester Plugin versions 1.0.9 and earlier. The vulnerability arises from storing a password unencrypted in the plugin’s global configuration file on the Jenkins master, enabling access by users with master-file-system access. The connected sources corroborate th...