16530 matches found
Buffer overflow
Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...
CVE-2023-4590
Summary: CVE-2023-4590 affects Frhed hex editor v1.6.0. A buffer overflow via a long filename argument triggers in the Structured Exception Handler (SEH) registers, potentially allowing arbitrary code execution. Practical details: a GitHub post ( exploit/PoC ) demonstrates a working exploit for F...
CVE-2023-4590 Buffer Overflow vulnerability in Frhed
Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...
Fedora: Security Advisory for vim (FEDORA-2023-ce3f7d4818)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: vim-9.0.2120-1.fc37
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
[SECURITY] Fedora 38 Update: vim-9.0.2120-1.fc38
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
VulnCheck KEV: CVE-2023-29919
SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...
Fedora 37 : vim (2023-ce3f7d4818)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ce3f7d4818 advisory. The newest upstream commit Security fixes for CVE-2023-48233, CVE-2023-48231, CVE-2023-48232, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,...
[SECURITY] Fedora 39 Update: vim-9.0.2120-1.fc39
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
ShortPixel Image Optimizer < 5.4.2 - Authenticated(Editor+) PHP Object Injection
Description The ShortPixel Image Optimizer plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.4.1 via deserialization of untrusted input in post content. This allows authenticated attackers with editor capabilities or above to inject a PHP Object. No PO...
Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-328-01)
The version of vim installed on the remote host is prior to 9.0.2127. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-328-01 advisory. - Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure...
Fedora: Security Advisory (FEDORA-2023-45cf2b4014)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-41792
Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41792
Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41792 Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
Cross-Site Request Forgery CSRF vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the SNMP Trap Editor. This issue affects Pandora FMS: from 700 through 773...
CVE-2023-41792
Summary : CVE-2023-41792 is a CSRF issue in Pandora FMS that enables Stored XSS via the SNMP Trap Editor. Affected versions are 700–773. The connected PT/PTSecurity entries confirm this CSRF/XSS combination and list Pandora FMS as the affected product. The NVD entry mirrors the description and im...
Accordion < 2.7 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Description The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and...
Welcome Email Editor < 5.0.7 - Subscriber+ Email Sending
Description The plugin does not have authorisation in its ajaxhandler function, allowing any authenticated users, such as subscriber to call it and send various emails...
Artica Pandora FMS Cross-Site Request Forgery Vulnerability
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A cross-site request forgery vulnerability exists in Artica Pandora FMS versions 700 through 773, which originates from a...
Nexter Extension < 2.0.4 - Authenticated(Editor+) Remote Code Execution via metabox
Description The Nexter Extension plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.0.3 via the nxt-code-php-snippet metabox. This allows authenticated attackers with editor-level privileges and above to execute code on the server...