CVE-2022-2819 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

CVE-2022-2816

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

CVE-2022-2817

Use After Free in GitHub repository vim/vim prior to 9.0.0213...

CVE-2022-2816 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

CVE-2022-2816

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...

CVE-2022-2819

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...

Out-of-bounds Write

vim:sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write in GitHub repository...

CVE-2022-2777

CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...

CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...

CVE-2022-2756 Server-Side Request Forgery (SSRF) in kareadita/kavita

Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...

Oracle Linux 9 : vim (ELSA-2022-5942)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5942 advisory. - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vimregsubboth in regexp.c Tenable has extracted the preceding...

CVE-2022-2731

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2733

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

Authorization

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2732

CVE-2022-2732 affects OpenEMR repository openemr/openemr prior to 7.0.0.1 due to Missing Authorization and improper privilege checks. The issue enables unauthorized users to create and edit amendments via interface/patient_file/summary/add_edit_amendments.php, compromising integrity and privacy a...

CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2713

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0...