11324 matches found
CVE-2022-23967
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15679. Reason: This candidate is a duplicate of CVE-2019-15679. Notes: All CVE users should reference CVE-2019-15679 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-0359 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-0361
CVE-2022-0361 is a Vim vulnerability described as a heap-based buffer overflow in the Vim source (vim/vim) prior to 8.2. The initial description and connected docs confirm the issue exists in Vim code paths that could lead to memory corruption. Public materials here do not provide concrete root-c...
SUSE SLES11 Security Update : aide (SUSE-SU-2022:14879-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2022:14879-1 advisory. - CVE-2021-45417: Fix a bufferoverflow in base64 functions bsc1194735 Tenable has extracted the preceding description block directly from the SUSE...
Debian DLA-2894-1 : aide - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2894 advisory. David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be triggered via large...
Jerryscript has an unspecified vulnerability (CNVD-2022-07250)
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in Jerryscript version 3.0.0, which originates in /jerry-core/ecma/base/ecma-helpers- A heap-based buffer overflow exists in ecmautf8stringtonumberbyradix in conversion.c. No detailed...
Heap-based Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in winredrstatus in drawscreen.c because the length of the NameBuff hasn't been checked when appending a space which leads to a buffer overflow...
Heap-Based Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...
Buffer Overflow
vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...
openSUSE 15 Security Update : aide (openSUSE-SU-2022:0150-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0150-1 advisory. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because o...
Debian: Security Advisory (DSA-5051-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0318
Heap-based Buffer Overflow in vim/vim prior to 8.2...
An unspecified vulnerability exists in vim (CNVD-2022-20698)
Vim is a UNIX-based editor. vim has a security vulnerability that stems from a heap-based buffer overflow in vim. No detailed vulnerability details are currently available...
Debian DLA-2890-1 : libspf2 - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2890 advisory. - libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail messag...
Oracle MySQL Cluster Data Node Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...
SUSE SLED15 / SLES15 Security Update : busybox (SUSE-SU-2022:0135-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0135-1 advisory. - CVE-2011-5325: Fixed tar directory traversal bsc951562. - CVE-2015-9261: Fixed segfalts and application...
Oracle MySQL Cluster Data Node Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...
Ubuntu 16.04 ESM : AIDE vulnerability (USN-5243-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5243-2 advisory. USN-5243-1 fixed a vulnerability in aide. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...
