Lucene search
+L

120 matches found

Cvelist
Cvelist
•added 2025/03/27 1:31 p.m.•43 views

CVE-2025-2849 UPX p_lx_elf.cpp un_DT_INIT heap-based overflow

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

4.8CVSS0.00304EPSS
SaveExploits1References7
CVE
CVE
•added 2025/03/27 1:31 p.m.•269 views

CVE-2025-2849

CVE-2025-2849 affects UPX up to 5.0.0. The vulnerability is in PackLinuxElf64::un_DT_INIT (src/p_lx_elf.cpp) and enables a heap-based buffer overflow, exploitable on the local host. Public exploit information exists. A patch is identified as e0b6ff192412f5bb5364c1948f4f6b27a0cd5ea2; applying the ...

5.5CVSS7AI score0.00304EPSS
SaveExploits1References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2022-2849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. CVE-2022-2849 Note that Nessus relies on the presence of the package as reported by t...

7.8CVSS6.5AI score0.00482EPSS
SaveExploits1References3
Mend
Mend
•added 2024/06/16 6:54 a.m.•3 views

MSC-2024-2849

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Circl
Circl
•added 2024/03/25 11:49 a.m.•21 views

CVE-2012-2849

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...

4.3CVSS8.2AI score0.01183EPSS
SaveExploits0References4
NVD
NVD
•added 2024/03/23 6:15 p.m.•18 views

CVE-2024-2849

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

9.8CVSS6.5AI score0.00909EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/23 5:31 p.m.•23 views

CVE-2024-2849 SourceCodester Simple File Manager unrestricted upload

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

6.5CVSS6.9AI score0.00909EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/23 5:31 p.m.•100 views

CVE-2024-2849

The CVE-2024-2849 entry concerns SourceCodester Simple File Manager 1.0. The vulnerability arises from incorrect handling of the photo argument, enabling unrestricted file uploads. This is described as a remote, critical issue with publicly disclosed exploit information. Affected component: Simpl...

9.8CVSS6.5AI score0.00909EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/03/23 5:31 p.m.•34 views

CVE-2024-2849 SourceCodester Simple File Manager unrestricted upload

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

6.5CVSS6.7AI score0.00909EPSS
SaveExploits1References4
Cloud Foundry
Cloud Foundry
•added 2023/04/24 12:00 a.m.•194 views

USN-5995-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to cras...

8.4CVSS7.2AI score0.02177EPSS
SaveExploits30Affected Software5
Amazon
Amazon
•added 2023/04/05 12:00 a.m.•69 views

Important: vim

Issue Overview: A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially...

8.4CVSS7.7AI score0.00948EPSS
SaveExploits14
OpenVAS
OpenVAS
•added 2023/04/05 12:00 a.m.•41 views

Ubuntu: Security Advisory (USN-5995-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS6.7AI score0.02177EPSS
SaveExploits30References2
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•30 views

Debian: Security Advisory (DLA-449-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.7AI score0.06677EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 3:32 a.m.•10 views

SUSE CVE-2022-2849

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220...

3.3CVSS9AI score0.00482EPSS
SaveExploits1References16
Mageia
Mageia
•added 2022/11/18 10:50 p.m.•95 views

Updated vim packages fix security vulnerability

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2000, CVE-2022-2129, CVE-2022-2210 Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-2042 Buffer Over-read in GitHub repository vim/vim prior to 8.2. CVE-2022-2124, CVE-2022-2175 Heap-based Buffer Overflow in...

8CVSS1.3AI score0.01637EPSS
SaveExploits55References16
Tenable Nessus
Tenable Nessus
•added 2022/10/21 12:00 a.m.•61 views

Amazon Linux 2 : vim (ALAS-2022-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...

8CVSS7.3AI score0.01483EPSS
SaveExploits26References53
CBLMariner
CBLMariner
•added 2022/09/17 5:56 a.m.•28 views

CVE-2022-2849 affecting package vim 9.0.0181-1

CVE-2022-2849 affecting package vim 9.0.0181-1. An upgraded version of the package is available that resolves this issue...

7.8CVSS7.4AI score0.00482EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/09/15 12:00 a.m.•77 views

Fedora: Security Advisory for vim (FEDORA-2022-b9edf60581)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.1AI score0.00948EPSS
SaveExploits8References2
CloudLinux
CloudLinux
•added 2022/08/25 3:52 p.m.•62 views

Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

7.8CVSS2.1AI score0.00534EPSS
SaveExploits2References1
osv_clsa
osv_clsa
•added 2022/08/25 3:52 p.m.•17 views

CLSA-2022-1661442764 Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

7.8CVSS6.7AI score0.00534EPSS
SaveExploits2References1
Rows per page
Query Builder