Astra Linux – Vulnerability in Vim

Use After Free in the GitHub repository vim/vim before version 8.2...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 8.2...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow; GitHub repository for Vim/Vim before version 8.2...

EUVD-2026-30777

Creating a "2dspherebucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryableencryptedrange" indices. This issue affects MongoDB Server...

CVE-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline

An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...

MongoDB Server code-related vulnerabilities

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. Versions of MongoDB Server prior to 8.2 and 8.2.7 contained code vulnerabilities...

CVE-2026-27811

CVE-2026-27811 affects the Roxy-WI web interface. Prior to version 8.2.6.3, a command injection exists in the /config/compare///show endpoint. The root cause is in app/modules/config/config.py on line 362, where user input is directly formatted into a template string that is eventually executed, ...

Orval code injection vulnerability

Orval is an open-source interface development tool developed by Orval. Versions of Orval from 7.19.0 to 7.21.0, as well as versions before 8.2.0, have a code injection vulnerability. This vulnerability stems from incomplete escape handling in the jsStringEscape function, which may lead to code...

CVE-2025-45379

Dell CloudLink is a data encryption and key management product. CVE-2025-45379 describes a command execution vulnerability where a privileged user with a known password can perform a command injection from the console to gain shell access. Affected versions are prior to 8.2. The issue is describe...

CVE-2025-30479

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...

CVE-2025-30479

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...

PT-2025-45136

Name of the Vulnerable Software and Affected Versions Dell CloudLink versions prior to 8.2 Description Dell CloudLink versions prior to 8.2 have an issue where a user with necessary privileges and knowledge of the password can execute commands through the console, potentially gaining shell access...

Markdown Syntax Cross-Site Scripting Vulnerabilities

Markdown Syntaxes is an open source parser and renderer for Markdown syntax from XWiki Contrib. A cross-site scripting vulnerability exists in Markdown Syntaxes versions prior to 8.2 through 8.9, which stems from mishandling of Markdown syntax and could lead to a cross-site scripting attack...

CVE-2024-50572

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

SUSE CVE-2011-1574

Stack-based buffer overflow in the ReadS3M method in loads3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file...

SUSE CVE-2022-2129

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-2231

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2183

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Vim security vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 8.2 that stems from a heap-based buffer overflow condition in vim...