WordPress Media from FTP Plugin < 11.17 is vulnerable to Settings Change

Software Media from FTP Type Plugin Vulnerable versions 11.17 Fixed in 11.17 OWASP Top 10 A6: Security Misconfiguration Classification Settings Change CVE CVE-2023-4019 Patch priority Low CVSS severity Low 3.8 Developer Claim ownership PSID 12e9a53fc39c Credits Dmitrii Ignatyev Required privilege...

Advisory ROSA-SA-2023-2214

Software: vim 8.0.1763 OS: ROSA Virtualization 2.1 packageevrstring: vim-8.0.1763-19.rv3.4.src.rpm CVE-ID: CVE-2021-3796 BDU-ID: 2021-05417 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the nvreplace function of the VIM text editor is related to memory usage after it has been freed. Exploitation o...

Debian: Security Advisory (DSA-1997-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

Mattermost Server < 7.1.4 / 7.2.x < 7.2.1 / 7.3.x < 7.3.1 DoS (MMSA-2022-00118)

The version of Mattermost Server running on the remote host is prior to 7.1.4, 7.2.x prior to 7.2.1, or 7.3.x prior to 7.3.1. It is, therefore, affected by a denial of service DoS vulnerability. An authenticated, remote attacker can crash the server via multiple large requests to one of the...

CVE-2022-4019

creationtimestamp| type| source ---|---|--- 2022-11-23 12:13:39+00:00| seen| https://t.me/cibsecurity/53408...

CVE-2022-4019 Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints...

CVE-2022-4019 Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server

A denial-of-service vulnerability in the Mattermost Playbooks plugin allows an authenticated user to crash the server via multiple large requests to one of the Playbooks API endpoints...

CVE-2022-4019

The CVE-2022-4019 entry concerns the Mattermost Playbooks plugin. It describes a denial-of-service vulnerability where an authenticated user can crash the server by issuing multiple large requests to a Playbooks API endpoint. The underlying cause is not explicitly detailed beyond a lack of reques...

Ubuntu: Security Advisory (USN-4019-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

vim security update

2:8.0.1763-19.0.1.2 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-19.2 - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read 2:8.0.1763-19.1 - CVE-2022-1154 vim: use after free...

MSC-2022-4019

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5433-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5433-1 advisory. It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1479)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3973, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use After Free CVE-2021-3974,...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1470)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3973, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use After Free CVE-2021-3974,...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1470)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2022-1415)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3875, CVE-2021-3903, CVE-2021-3927,...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2022-1389)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3875, CVE-2021-3903, CVE-2021-3927,...

CVE-2021-4019 affecting package vim for versions less than 8.2.4081-1

CVE-2021-4019 affecting package vim for versions less than 8.2.4081-1. An upgraded version of the package is available that resolves this issue...

USN-5247-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leadi...