CVE-2022-1621 Heap buffer overflow in vim_strncpy find_word in vim/vim

Heap buffer overflow in vimstrncpy findword in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1616 Use after free in append_command in vim/vim

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1616

CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...

CVE-2022-1616

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1616 Use after free in append_command in vim/vim

Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

CVE-2022-1381 pertains to Vim/ vim in which a global heap buffer overflow occurs in the skip_range function. Public advisories and vendor bulletins indicate this affects Vim prior to a specific 8.2.x release (e.g., Mariner/ALAS advisories cite Vim versions below 8.2.4925-1 and note an upgrade to ...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

CVE-2022-1381

global heap buffer overflow in skiprange in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution...

Bypass Protection For Server-side Request Forgery (SSRF)

github.com/stripe/smokescreen is vulnerable to Bypass protection for sever-side request forgery. Appending a dot to the end of user-supplied URLs, or by providing input in a different letter case allows an attacker to bypass the deny list feature of the library...

EulerOS Virtualization 3.0.2.6 : kernel (EulerOS-SA-2021-2857)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise Linux RHEL...

ModelSim Simulation and Questa Simulation Underprotected Credential Vulnerability

Questa and ModelSim simulators are used worldwide to simulate, debug, and verify integrated circuit designs, etc. ModelSim Simulation and Questa Simulation do not protect sufficient credentials, and the RSA white-box implementation in the affected application does not adequately protect the...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libxslt Multiple Vulnerabilities (NS-SA-2021-0175)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libxslt packages installed that are affected by multiple vulnerabilities: - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receivin...

NewStart CGSL MAIN 6.02 : libxslt Multiple Vulnerabilities (NS-SA-2021-0088)

The remote NewStart CGSL host, running version MAIN 6.02, has libxslt packages installed that are affected by multiple vulnerabilities: - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error...

CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

WPS Hide Login 安全漏洞

A security vulnerability exists in WPS Hide Login 1.6.1 that allows remote attackers to bypass the protection mechanism via a post password...

SmartFoxServer 代码注入漏洞

SmartFoxServer is a software development program for rapid development of multiplayer games and applications via Adobe Flash/Flex/Air, Unity, HTML5, iOS, Universal Windows Platform, Android, Java, C ++, etc. SmartFoxServer is a software development program from SmartFoxServer, USA. The software...

Amazon Linux AMI : libxslt (ALAS-2020-1464) (deprecated)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1464 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and...

Medium: libxslt

Issue Overview: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded. CVE-2019-110...