CVE-2024-2817

CVE-2024-2817 affects Tenda AC15 firmware 15.03.05.18. The issue resides in the fromSysToolRestoreSet function at /goform/SysToolRestoreSet, where insufficient request validation enables cross-site request forgery. The attack can be launched remotely, and the exploit has been disclosed publicly. ...

BELL-CVE-2022-2817 CVE-2022-2817 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2018-2817 CVE-2018-2817 does not affect BellSoft software

Bulletin has no description...

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6302-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6302-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

CVE-2014-2817

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 07:54:18+00:00| seen| https://t.me/arpsyndicate/1151 2024-12-24 20:31:42+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971601 2025-02-14 10:00:29+00:00|...

CVE-2023-2817

A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions = 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively...

CVE-2023-2817

A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions = 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively...

CVE-2023-2817

The CVE-2023-2817 issue is a post-authentication stored cross-site scripting vulnerability in Craft CMS versions up to 4.4.11. It allows HTML/script injection in field names, which triggers when those fields are added to a category or section and visited on Categories/Entries pages. Several conne...

CVE-2023-2817

A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions = 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively...

Updated vim packages fix security vulnerability

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2000, CVE-2022-2129, CVE-2022-2210 Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-2042 Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124, CVE-2022-2175 Heap-based Buffer Overflow in...

MariaDB 5.5.0 < 5.5.60 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.60. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.60 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

Amazon Linux 2 : vim (ALAS-2022-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...

Low: vim

Issue Overview: A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in vim. CVE-2022-2257 A heap buffer overflow vulnerability was found in Vim's inc...

CVE-2022-2817 affecting package vim 9.0.0181-1

CVE-2022-2817 affecting package vim 9.0.0181-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2817 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2817 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

Slackware: Security Advisory (SSA:2022-229-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-229-01)

The version of vim installed on the remote host is prior to 8.2.4649 / 9.0.0223. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-229-01 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0211. CVE-2022-2816 - Use After Free in GitHub...

CVE-2022-2817

A use-after-free vulnerability was found in Vim in the stringquote function in the strings.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into...

CVE-2022-2817

Use After Free in GitHub repository vim/vim prior to 9.0.0213...

CVE-2022-2817

CVE-2022-2817 is a Use-After-Free in Vim. Public advisories (ALAS2-2022-1868, ALAS2022-1639) describe a use-after-free in Vim’s string_quote function (strings.c) that can crash Vim and, in some contexts, may enable code execution. The CVE is associated with Vim versions prior to the fixed release...