CVE-2022-2284

CVE-2022-2284 affects vim/vim prior to 9.0; described as a heap-based buffer overflow. Connected Apple/ALAS advisories list Vim as affected and provide upgrade paths to Vim 9.x (e.g., package updates in Vim 9.0 series) as remediation. No exploitation details are provided in the supplied documents...

CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2285

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...

CVE-2022-2287

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...

CVE-2022-2286 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...

CVE-2022-2284 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2284

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

GO-2022-0438 Exposure of sensitive information via log file in github.com/hashicorp/go-getter

The getter package can write SSH credentials to its logfile, exposing credentials to local users able to read the logfile...

CVE-2022-2282

Removed by vendor...

CVE-2022-2264

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2264

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

Heap overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2279

NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11...

CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.19...

CVE-2022-2280

The CVE-2022-2280 issue affects microweber/microweber prior to 1.2.19 and is a stored XSS vulnerability. Public sources indicate the vulnerability arises from SVG content not being properly sanitized (plupload.php), allowing injected JavaScript when an SVG is processed. CVSS 3.1 base score is 5.4...

CVE-2022-2264

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2264 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...

CVE-2022-2257

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...