Lucene search
+L

10044 matches found

OSV
OSV
•added 2026/02/06 11:15 p.m.•18 views

AZL-76764 CVE-2026-25749 affecting package vim for versions less than 9.2.0088-1

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/02/06 11:15 p.m.•22 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS7AI score0.00222EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/06 11:15 p.m.•30 views

UBUNTU-CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/06 10:43 p.m.•16 views

CVE-2026-25749 Heap Overflow in Vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS5.5AI score
SaveExploits0References5
CVE
CVE
•added 2026/02/06 10:43 p.m.•80 views

CVE-2026-25749

Vim (editor) is affected by CVE-2026-25749 prior to version 9.1.2132, where the tag file resolution logic mishandles the helpfile option. In get_tagfname() (src/tag.c) the user-controlled helpfile value is copied into a fixed-size heap buffer (MAXPATHL+1, ~4097 bytes) via an unsafe STRCPY without...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References3Affected Software2
attackerkb
attackerkb
•added 2026/02/06 10:43 p.m.•18 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/02/06 10:43 p.m.•59 views

CVE-2026-25749 Heap Overflow in Vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS0.00222EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2026/02/06 10:43 p.m.•17 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/02/06 10:43 p.m.•25 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•17 views

PT-2026-71984

Name of the Vulnerable Software and Affected Versions actix-files versions prior to 0.6.10 Description An information exposure issue exists when a non-existing folder is provided as the serve from argument to the Files::new function. In this scenario, the mount path defaults to an empty path, and...

6.3CVSS5.8AI score0.00469EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•22 views

PT-2026-6666

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 4.1.1 Description A flaw exists in Free5GC’s SMF component, specifically within the ResolveNodeIdToIp function located in the internal/sbi/processor/datapath.go file. This issue can lead to a denial of service. Remote...

7.5CVSS5.8AI score0.0058EPSS
SaveExploits1References13
OSV
OSV
•added 2026/02/05 7:15 p.m.•21 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.8AI score0.00194EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/05 7:15 p.m.•18 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS0.00194EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/05 6:24 p.m.•11 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.3AI score0.00194EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/02/05 6:24 p.m.•21 views

EUVD-2025-206835

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.3AI score0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/05 6:24 p.m.•9 views

CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/05 6:24 p.m.•42 views

CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS0.00194EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/05 6:24 p.m.•35 views

CVE-2025-15328

CVE-2025-15328 describes an improper link resolution before file access in Tanium Enforce. Documents indicate Tanium addressed the issue, but provide no explicit affected versions, patch version, or detailed root cause beyond the general flaw. The PT-Security entry warns of potential unauthorized...

5CVSS5.8AI score0.00194EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
•added 2026/02/05 12:37 p.m.•20 views

Path Traversal

node-tar is vulnerable to Path Traversal. The vulnerability is due to inconsistent path resolution between hardlink security checks and hardlink creation logic, allowing a malicious TAR archive to bypass extraction directory restrictions and create hardlinks to arbitrary files outside the intende...

8.2CVSS6.6AI score0.00617EPSS
SaveExploits1References11Affected Software2
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•19 views

PT-2026-6613

Name of the Vulnerable Software and Affected Versions Tanium Enforce affected versions not specified Description Tanium Enforce contains a flaw related to improper link resolution before file access. This could potentially allow unauthorized access to files. Recommendations At the moment, there i...

5CVSS5.4AI score0.00194EPSS
SaveExploits0References4
Rows per page
Query Builder