Lucene search
+L

984 matches found

OSV
OSV
added 2022/03/10 5:45 p.m.7 views

CVE-2022-24177

A cross-site scripting XSS vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6.5AI score0.00675EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/10 5:45 p.m.26 views

CVE-2022-24177

A cross-site scripting XSS vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS0.00675EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/10 5:45 p.m.18 views

Cross site scripting

A cross-site scripting XSS vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML...

4.3CVSS6AI score0.00675EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/03/07 7:44 p.m.95 views

CVE-2022-24177

CVE-2022-24177 affects Ex Libris ALEPH 500, specifically the cgi-bin/ej.cgi component in versions v18.1 and v20, where a cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML. The available connected documents confirm the affected product and the vulne...

6.1CVSS6AI score0.00675EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/07 7:44 p.m.33 views

CVE-2022-24177

A cross-site scripting XSS vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML...

6.1AI score0.00675EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:00 a.m.13 views

The vulnerability of the src/ex_cmds.c component of the text editor Vim, allowing a hacker to execute arbitrary code.

The vulnerability of the src/excmds.c component of the text editor Vim relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.01389EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/02/28 12:00 a.m.12 views

The vulnerability of the ex_open() function (src/ex_docmd.c) in the Vim text editor, which allows an attacker to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the exopen function src/exdocmd.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

7.8CVSS7.2AI score0.01293EPSS
SaveExploits1References10Affected Software6
OSV
OSV
added 2022/02/22 10:45 p.m.23 views

USN-5302-1 linux-oem-5.14 vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex...

9CVSS6.9AI score0.67994EPSS
SaveExploits15References7
Ubuntu
Ubuntu
added 2022/02/22 10:45 p.m.168 views

USN-5302-1: Linux kernel (OEM) vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex...

9CVSS7.3AI score0.67994EPSS
SaveExploits15
OSV
OSV
added 2022/02/14 4:24 p.m.13 views

CLSA-2022-1644855867 Fix CVE(s): CVE-2022-0351, CVE-2022-0359, CVE-2022-0368, CVE-2022-0361

SECURITY UPDATE: Condition with many "" causes a crash - debian/patches/CVE-2022-0351.patch: Limit recursion depth to 1000 - CVE-2022-0351 SECURITY UPDATE: Illegal memory access with large tabstop in Ex mode - debian/patches/CVE-2022-0359.patch: Allocate enough memory - CVE-2022-0359 SECURITY...

8.4CVSS7.1AI score0.01566EPSS
SaveExploits4References1
OSV
OSV
added 2022/02/14 4:23 p.m.25 views

CLSA-2022-1644855795 Fixed CVEs in vim: CVE-2022-0359, CVE-2022-0351, CVE-2022-0368, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

8.4CVSS6.7AI score0.01566EPSS
SaveExploits4References1
CloudLinux
CloudLinux
added 2022/02/14 4:21 p.m.86 views

Fix of CVE: CVE-2022-0351, CVE-2022-0368, CVE-2022-0359, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

8.4CVSS3.6AI score0.01566EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2022/01/26 7:43 p.m.102 views

CVE-2022-0359

A flaw was found in vim. The vulnerability occurs due to Illegal memory access with large 'tabstop' in Ex mode, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s...

7.8CVSS5.5AI score0.01339EPSS
SaveExploits1References3
NVD
NVD
added 2022/01/19 1:15 a.m.23 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS0.0093EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/19 1:15 a.m.13 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS6AI score0.0093EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/19 1:15 a.m.24 views

Design/Logic Flaw

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

5CVSS7.8AI score0.0093EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/01/19 12:21 a.m.102 views

CVE-2022-22180

CVE-2022-22180 affects Junos OS on EX2300/EX2300-MP/EX3400 series. Vulnerability arises from an improper check for unusual or exceptional conditions during processing of specific IPv6 packets, leading to DMA memory exhaustion and a Denial of Service. Observed symptoms include fpc0 (buf alloc) fai...

7.5CVSS7.8AI score0.0093EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/12 5:00 p.m.12 views

CVE-2022-22180

An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this vulnerability may cause traffic to stop being...

7.5CVSS7.2AI score0.0093EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:00 a.m.45 views

Juniper Junos OS Vulnerability (JSA11286)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11286 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA...

7.5CVSS7.7AI score0.0093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/12/06 12:00 a.m.5 views

PT-2021-6133 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...

9.8CVSS6.4AI score0.26474EPSS
SaveExploits118References541
Rows per page
Query Builder