Lucene search
K

105 matches found

OSV
OSV
added 2026/05/05 1:34 a.m.2 views

CLSA-2026-1777944852 vim: Fix of 2 CVEs

CVE-2021-3984: in findstartbrace misc1.c, when a found '' lies inside a comment, restore the full cursor position line and column instead of only the line so subsequent C-indent lookups stay within the line bounds. - CVE-2022-2571: in inscomplgetexp edit.c, when CONTADDING is active, only advance...

7.8CVSS7.1AI score0.00177EPSS
Exploits2References1
Circl
Circl
added 2026/03/19 8:9 a.m.2 views

CVE-2026-2571

creationtimestamp| type| source ---|---|--- 2026-03-19 08:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfkg25aqi2e...

4.3CVSS5.7AI score0.00046EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.5 views

MiracleLinux 7 : squid-3.5.20-2.el7 (AXSA:2016-905:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-905:02 advisory. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software,...

7.5CVSS6.2AI score0.70316EPSS
Exploits0References6
EUVD
EUVD
added 2026/01/14 3:30 a.m.3 views

EUVD-2026-2571

EUVD-2026-2571...

7.8CVSS6.4AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-2571

Malware in sbrugna...

5CVSS6.4AI score0.00346EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/07/04 2:43 p.m.1 views

SUSE CVE-2025-2571

Mattermost versions 10.7.x = 10.7.0, 10.6.x = 10.6.2, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow...

4.2CVSS7.1AI score0.00173EPSS
Exploits0References2
NVD
NVD
added 2025/05/30 3:15 p.m.9 views

CVE-2025-2571

Mattermost versions 10.7.x = 10.7.0, 10.6.x = 10.6.2, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow...

4.2CVSS0.00173EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-2571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. CVE-2022-2571 Note that Nessus relies on the presence of the package as reported by t...

7.8CVSS7.4AI score0.00112EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-2571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP...

7.5CVSS7.3AI score0.14329EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.22 views

RHEL 5 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code...

9.6AI score0.70316EPSS
Exploits1References22
CVE
CVE
added 2024/03/18 12:31 a.m.52 views

CVE-2024-2571

The CVE-2024-2571 entry documents a vulnerability in SourceCodester Employee Task Management System 1.0 affecting unknown code in /manage-admin.php, causing execution after redirect and enabling remote exploitation. The issue is described as critical with a network attack vector and no authentica...

9.8CVSS7.4AI score0.00145EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2024/03/17 3:51 p.m.1 views

CVE-2024-2571

creationtimestamp| type| source ---|---|--- 2024-03-17 15:51:32+00:00| seen| https://t.me/ctinow/209969 2024-03-18 02:21:55+00:00| seen| https://t.me/ctinow/210113 2024-03-18 02:26:50+00:00| seen| https://t.me/ctinow/210120...

9.8CVSS7.3AI score0.00145EPSS
Exploits0References3
Patchstack
Patchstack
added 2023/06/22 12:0 a.m.8 views

WordPress Quiz Maker Plugin < 6.4.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Quiz Maker Type Plugin Vulnerable versions 6.4.2.7 Fixed in 6.4.2.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2571 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID a73265b24616 Credits Erwan LR WPScan Required...

6.1CVSS5.6AI score0.00211EPSS
Exploits2References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.25 views

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...

9.8CVSS5.5AI score0.00659EPSS
Exploits37References39
CVE
CVE
added 2023/06/05 1:39 p.m.49 views

CVE-2023-2571

CVE-2023-2571 affects the Quiz Maker WordPress plugin. The vulnerability arises because the plugin does not escape certain parameters before outputting them in HTML attributes, leading to a Reflected Cross-Site Scripting (XSS) possibility that could affect high-privilege users (e.g., admins). Aff...

6.1CVSS6.1AI score0.00211EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/05 1:39 p.m.8 views

CVE-2023-2571 Quiz Maker < 6.4.2.7 - Reflected XSS

The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00211EPSS
Exploits2References1
Cloud Foundry
Cloud Foundry
added 2023/04/24 12:0 a.m.85 views

USN-5995-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to cras...

8.4CVSS7.5AI score0.01534EPSS
Exploits30Affected Software5
OpenVAS
OpenVAS
added 2023/04/05 12:0 a.m.31 views

Ubuntu: Security Advisory (USN-5995-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.4AI score0.01534EPSS
Exploits30References2
Tenable Nessus
Tenable Nessus
added 2023/03/07 12:0 a.m.58 views

Amazon Linux 2 : vim (ALAS-2023-1975)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1975 advisory. A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completi...

7.8CVSS6.9AI score0.00112EPSS
Exploits21References46
Amazon
Amazon
added 2023/03/06 12:0 a.m.71 views

Important: vim

Issue Overview: A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially...

7.8CVSS7.8AI score0.00112EPSS
Exploits21
Rows per page
Query Builder