Lucene search
+L

9096 matches found

OSV
OSV
added 2022/10/26 8:15 p.m.12 views

AZL-11358 CVE-2022-3705 affecting package vim for versions less than 9.0.0805-1

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.9AI score0.01316EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/26 8:15 p.m.6 views

DEBIAN-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.2AI score0.01316EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/26 8:15 p.m.6 views

ALPINE-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.9AI score0.01316EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/26 8:15 p.m.8 views

UBUNTU-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.5AI score0.01316EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/10/26 8:15 p.m.49 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.6AI score0.01316EPSS
SaveExploits0References4
Prion
Prion
added 2022/10/26 8:15 p.m.26 views

Design/Logic Flaw

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5.1CVSS7.4AI score0.01316EPSS
SaveExploits0References10Affected Software3
Vulnrichment
Vulnrichment
added 2022/10/26 12:00 a.m.4 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS6.2AI score0.01316EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/10/26 12:00 a.m.4 views

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim that stems from a memory reuse after release issue...

7.5CVSS6.6AI score0.01316EPSS
SaveExploits0References17
Debian CVE
Debian CVE
added 2022/10/26 12:00 a.m.37 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS7.7AI score0.01316EPSS
SaveExploits0
CVE
CVE
added 2022/10/26 12:00 a.m.231 views

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...

7.5CVSS6.7AI score0.01316EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2022/10/26 12:00 a.m.44 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS5.5AI score
SaveExploits0References12
Cvelist
Cvelist
added 2022/10/26 12:00 a.m.62 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS8.3AI score0.01316EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
added 2022/10/26 12:00 a.m.57 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.5AI score0.01316EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.16 views

The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

9.3CVSS7.7AI score0.01258EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.12 views

The vulnerability of the `vim regsub_both` function in the Vim editor’s regexp.c file allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the vim regsubboth function in the regexp.c file of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

9.3CVSS7.4AI score0.01542EPSS
SaveExploits1References11Affected Software5
Positive Technologies
Positive Technologies
added 2022/10/26 12:00 a.m.4 views

PT-2022-5349 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0805 Description: A vulnerability was found in the function qf update buffer of the file quickfix.c of the component autocmd Handler, which leads to use after free. The attack may be launched remotely, potentially...

9.8CVSS7.5AI score0.26474EPSS
SaveExploits123References604
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.13 views

The vulnerability of the `skipwhite` function in the `charset.c` component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the skipwhite function in the charset.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.2AI score0.0124EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.9 views

The vulnerability of the spell_dump_compl function in the spell.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the spelldumpcompl function in the spell.c component of the Vim text editor is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.6AI score0.01446EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.11 views

The vulnerability of the `vim regsub_both` function in the Vim editor’s regexp.c file allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the vim regsubboth function in the regexp.c file of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

9.3CVSS7.4AI score0.0142EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:00 a.m.13 views

The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

9.3CVSS6.9AI score0.01338EPSS
SaveExploits1References12Affected Software4
Rows per page
Query Builder