ALPINE-CVE-2022-0572

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0554

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

AZL-8459 CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0392

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...

DEBIAN-CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

AZL-7085 CVE-2021-4192 affecting package vim for versions less than 8.2.4081-1

vim is vulnerable to Use After Free...

CVE-2021-24847

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is...

Intel Ethernet Controllers 缓冲区错误漏洞

Intel Ethernet Controllers is an Ethernet controller from IntelR Corporation. A buffer error vulnerability exists in Intel Ethernet controllers that stems from out-of-bounds writes in IntelR Ethernet 700 firmware for series controllers prior to version 8.2 may allow a privileged user to potential...

CVE-2021-29907

IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633...

EMC PowerScale操作系统命令注入漏洞

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...

CVE-2021-32773

Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...

CVE-2021-26968

A remote authenticated stored cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site...

CVE-2021-26968

A remote authenticated stored cross-site scripting xss vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365. The followi...

Dell EMC Isilon OneFS Resource Management Error Vulnerability

Dell EMC Isilon OneFS is a horizontally scalable storage system for unstructured data from Dell USA. A resource management error vulnerability exists in Dell EMC Isilon OneFS 8.2.2 and prior versions. An attacker could exploit this vulnerability to cause a denial of service...

Dell EMC Isilon OneFS Access Control Error Vulnerability

Dell EMC Isilon OneFS is a horizontally scalable storage system for unstructured data from Dell USA. An access control error vulnerability exists in Dell EMC Isilon OneFS versions prior to 8.2.0. The vulnerability arises from the network system or product not properly restricting access to...

OpenSSH now supports FIDO U2F security keys for 2-factor authentication

Here's excellent news for sysadmins. You can now use a physical security key as hardware-based two-factor authentication to securely log into a remote system via SSH protocol. OpenSSH, one of the most widely used open-source implementations of the Secure Shell SSH Protocol, yesterday announced th...