CVE-2022-2849

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220...

CVE-2022-2862

Use After Free in GitHub repository vim/vim prior to 9.0.0221...

Improper Authentication

Authentication Bypass by Primary Weakness in GitHub repository cockpit-hq/cockpit prior to 2.2.2...

CVE-2022-2816

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

CVE-2022-2816

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

CVE-2022-2816

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2824

The CVE-2022-2824 entry concerns OpenEMR before version 7.0.0.1, with an Authorization Bypass Through a User-Controlled Key due to improper access control. Affected component/target is OpenEMR’s web resources where a user-controlled key can bypass authorization, enabling unauthorized access to ce...

CVE-2022-2824 Authorization Bypass Through User-Controlled Key in openemr/openemr

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2818

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2...

CVE-2022-2819

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

Session fixation

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...

CVE-2022-2820 Session Fixation in namelessmc/nameless

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...

CVE-2022-2820

CVE-2022-2820 affects NamelessMC (namelessmc/nameless) versions prior to 2.0.2. The vulnerability is a session fixation issue in the authentication/session handling, with root cause cited as improper session management prior to 2.0.2. Impact is described as elevated risk to user sessions (high co...

CVE-2022-2818 Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2...

CVE-2022-2818

The CVE-2022-2818 entry concerns Cockpit/Cockpit Content Platform prior to version 2.2.2, where an authentication vulnerability allows bypassing 2FA. The GitHub/GHSA advisory and related OSV/NVD entries confirm that the issue enables unauthorized access and, in some reports, exposure of the 2FA s...

CVE-2022-2819 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

CVE-2022-2817

CVE-2022-2817 is a Use-After-Free in Vim. Public advisories (ALAS2-2022-1868, ALAS2022-1639) describe a use-after-free in Vim’s string_quote function (strings.c) that can crash Vim and, in some contexts, may enable code execution. The CVE is associated with Vim versions prior to the fixed release...

CVE-2022-2817 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0213...

CVE-2022-2816 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...