Lucene search
+L

936 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/28 12:0 a.m.8 views

The vulnerability of the ex_open() function (src/ex_docmd.c) in the Vim text editor, which allows an attacker to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the exopen function src/exdocmd.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

7.8CVSS7.2AI score0.01293EPSS
Exploits1References10Affected Software6
Ubuntu
Ubuntu
added 2022/02/22 10:45 p.m.154 views

USN-5302-1: Linux kernel (OEM) vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex...

9CVSS7.3AI score0.67994EPSS
Exploits15
OSV
OSV
added 2022/02/22 10:45 p.m.12 views

USN-5302-1 linux-oem-5.14 vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex...

9CVSS6.9AI score0.67994EPSS
Exploits15References7
OSV
OSV
added 2022/02/14 4:24 p.m.8 views

CLSA-2022-1644855867 Fix CVE(s): CVE-2022-0351, CVE-2022-0359, CVE-2022-0368, CVE-2022-0361

SECURITY UPDATE: Condition with many "" causes a crash - debian/patches/CVE-2022-0351.patch: Limit recursion depth to 1000 - CVE-2022-0351 SECURITY UPDATE: Illegal memory access with large tabstop in Ex mode - debian/patches/CVE-2022-0359.patch: Allocate enough memory - CVE-2022-0359 SECURITY...

8.4CVSS7.1AI score0.01566EPSS
Exploits4References1
OSV
OSV
added 2022/02/14 4:23 p.m.12 views

CLSA-2022-1644855795 Fixed CVEs in vim: CVE-2022-0359, CVE-2022-0351, CVE-2022-0368, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

8.4CVSS6.7AI score0.01566EPSS
Exploits4References1
CloudLinux
CloudLinux
added 2022/02/14 4:21 p.m.80 views

Fix of CVE: CVE-2022-0351, CVE-2022-0368, CVE-2022-0359, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

8.4CVSS3.6AI score0.01566EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2022/01/26 7:43 p.m.96 views

CVE-2022-0359

A flaw was found in vim. The vulnerability occurs due to Illegal memory access with large 'tabstop' in Ex mode, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...

7.8CVSS5.5AI score0.01339EPSS
Exploits1References3
NVD
NVD
added 2022/01/19 1:15 a.m.13 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS0.0093EPSS
Exploits0References1
OSV
OSV
added 2022/01/19 1:15 a.m.7 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS6AI score0.0093EPSS
Exploits0References1
Prion
Prion
added 2022/01/19 1:15 a.m.19 views

Design/Logic Flaw

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

5CVSS7.8AI score0.0093EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/01/19 12:21 a.m.79 views

CVE-2022-22180

CVE-2022-22180 affects Junos OS on EX2300/EX2300-MP/EX3400 series. Vulnerability arises from an improper check for unusual or exceptional conditions during processing of specific IPv6 packets, leading to DMA memory exhaustion and a Denial of Service. Observed symptoms include fpc0 (buf alloc) fai...

7.5CVSS7.8AI score0.0093EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/12 5:0 p.m.8 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS7.2AI score0.0093EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.39 views

Juniper Junos OS Vulnerability (JSA11286)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11286 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA...

7.5CVSS7.7AI score0.0093EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/12/06 12:0 a.m.3 views

PT-2021-6133 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...

9.8CVSS6.4AI score0.26583EPSS
Exploits118References541
Openbugbounty
Openbugbounty
added 2021/11/01 10:30 a.m.13 views

auction.pro-ex.com.na Cross Site Scripting vulnerability OBB-2221188

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.8 views

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series, related to unlimited resource distribution, allows a hacker to cause service interruptions.

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series lies in their unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.00961EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/09/02 5:15 p.m.22 views

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

7.8CVSS0.00328EPSS
Exploits0References1
Prion
Prion
added 2021/09/02 5:15 p.m.10 views

Path traversal

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

4.4CVSS7.7AI score0.00328EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/02 4:52 p.m.26 views

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

8AI score0.00328EPSS
Exploits0References1
CVE
CVE
added 2021/09/02 4:52 p.m.45 views

CVE-2021-22775

GP-Pro EX, V4.09.250 and earlier, are affected by CWE-427: Uncontrolled Search Path Element. The issue stems from failure to properly filter special elements in the software’s search path, potentially enabling local code execution with elevated privileges during installation. Impact: local code e...

7.8CVSS7.7AI score0.00328EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder