Lucene search
+L

441057 matches found

OSV
OSV
•added 2026/09/17 8:16 p.m.•6 views

UBUNTU-CVE-2026-54692

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

7.8CVSS6.3AI score0.00194EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/17 8:16 p.m.•7 views

UBUNTU-CVE-2026-54627

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psdprivatesailpixelformat in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap color mode to SAILPIXELFORMATBPP1INDEXED without requiring...

9.8CVSS6.2AI score0.00775EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•16 views

vim: Vim: Arbitrary command execution via crafted vimball

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function...

8.4CVSS7.7AI score0.00131EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•16 views

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

5.3CVSS6.5AI score0.00135EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•13 views

vim: Vim: Out-of-bounds Write in Spell File Word Count

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-boun...

8.4CVSS7.1AI score0.00124EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•15 views

vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...

7.1CVSS5.7AI score0.0016EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•15 views

vim: command injection when decompressing .tgz archives

A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape without the special flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current...

7CVSS7.3AI score0.00713EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•19 views

vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries

A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user...

8.6CVSS8.1AI score0.00336EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•13 views

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

8.4CVSS7.2AI score0.00145EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•11 views

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

8.2CVSS6.9AI score0.00271EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•14 views

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

6.6CVSS7.1AI score0.00781EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•20 views

vim: Vim: Heap buffer overflow allows arbitrary code execution

A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...

8.5CVSS8.3AI score0.00125EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•13 views

vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

7.8CVSS7.8AI score0.00201EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•11 views

vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

A memory corruption flaw in Vim allows an attacker to cause a Denial of Service DoS. When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spellsoundfoldsofo function, causing the editor to crash...

7.8CVSS7.4AI score0.00118EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•13 views

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...

8.4CVSS7.7AI score0.00137EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/17 8:06 p.m.•17 views

vim: Vim: Arbitrary Code Execution via crafted directory names

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...

8.8CVSS7.8AI score0.0026EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/17 8:04 p.m.•15 views

Security Bulletin: Vulnerability in Apache Log4j API affects DB2 Dev Extension (CVE-2026-49844)

Summary Upgraded log4j-api to 2.25.5 to remediate CVE-2026-49844 CWE-116: Improper Encoding of non-finite floating-point values in MapMessage JSON serialization — CVSS Base Score 6.3 Medium — PVR0815934. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite...

6.3CVSS5.9AI score0.00813EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/17 7:58 p.m.•11 views

Security Bulletin: Vulnerability in form-data affects DB2 Dev Extension (CVE-2026-12143)

Summary Upgraded form-data to 4.0.6 to remediate CVE-2026-12143 CWE-93: CRLF Injection — CVSS Base Score 7.5 High — PVR0791412. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field...

8.7CVSS5.9AI score0.00669EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/17 7:50 p.m.•11 views

Security Bulletin: Vulnerability in Apache Tomcat affects DB2 Dev Extension (CVE-2026-59083, CVE-2026-59084)

Summary Upgraded tomcat-embed-core to 10.1.57 to remediate CVE-2026-59083 Security Constraint Bypass via URL hex-encoding and CVE-2026-59084 Insufficient EncryptInterceptor Documentation — CVSS Base Score 9.1 Critical — PVR0818163. Vulnerability Details CVEID:CVE-2026-59083 DESCRIPTION: Improper...

9.1CVSS7.9AI score0.00506EPSS
SaveExploits1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/17 7:47 p.m.•9 views

CVE-2026-54692 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file...

7.8CVSS6.3AI score0.00194EPSS
SaveExploits0References3
Rows per page
Query Builder