143 matches found
CVE-2022-2175
CVE-2022-2175 is a Buffer Over-read in Vim up to version 8.2, triggered by opening a crafted file. Connected advisories (ALAS-2022-1628) doc explicit CVE-2022-2175 as a flaw in vim/vim’s code path affecting stored memory when handling command-line or file input, leading to a crash or memory corru...
CVE-2022-2175
Buffer Over-read in GitHub repository vim/vim prior to 8.2...
CVE-2021-2175
creationtimestamp| type| source ---|---|--- 2022-02-02 16:57:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1466...
Mageia: Security Advisory (MGASA-2016-0253)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Sourcing
Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2021-2245 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database - Enterprise Edition Unified Audit component could allow an...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Contract Management
Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2245 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database - Enterprise Edition Unified Audit component could allow...
CVE-2021-2175
The CVE-2021-2175 vulnerability affects Oracle Database Server’s Database Vault component. Affected are Oracle versions 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker with Create Any View or Select Any View privileges and network access via Oracle Net can obtain unauthorized read access to a subse...
SUSE: Security Advisory (SUSE-SU-2017:2175-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2175
Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by users able to control the XML input files processed by the plugin...
CVE-2020-2175
CVE-2020-2175 affects Jenkins FitNesse Plugin
CVE-2019-2175
CVE-2019-2175 affects Android 9; in SliceManagerService.java, checkAccess has an incorrect argument order that can bypass permissions and enable local privilege escalation with user interaction required. Affected component is the Android Framework (SliceManagerService) on Android 9. The issue is ...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...
com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (=2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (=2.0.0) +50 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (=2.0.0)
org.apache.pdfbox:pdfbox MAVEN version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pdfbox:pdfbox and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin =2.0.0 -...
biz.netcentric.cq.tools.accesscontroltool:sling-minimum-version-environment (>=4.2.0 <=4.2.1), br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=3.0.0) +457 more potentially affected by CVE-2016-2175 via org.apache.pdfbox:pdfbox (>=0.8.0-incubating <=1.8.11)
org.apache.pdfbox:pdfbox MAVEN version =0.8.0-incubating, =4.2.0, =1.2.1, =3.0.0, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =0.6, =1.0.8, =1.0.12 and more Source cves: CVE-2016-2175 Source advisory: OSV:GHSA-4C32-XMGJ-2G98...
Apache Tika does not properly initialize the XML parser or choose handlers
Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity XXE attacks via vectors involving 1 spreadsheets in OOXML files and 2 XMP metadata in PDF and other file formats, a related issue to...