Adobe Character Animator 4.0.0 < 22.5.0 / 22.0 < 22.5 Multiple Arbitrary code execution (APSB22-34)

The version of Adobe Character Animator installed on the remote Windows host is prior to 22.5, 22.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-34 advisory. - Adobe Character Animator version 4.4.7 and earlier and 22.4 and earlier are affected by an out-o...

CVE-2022-2344

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045...

CVE-2022-2343

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...

CVE-2022-2344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2014)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 - Use after free in utfptr2char in GitHub repository vim/vim...

Unspecified vulnerability in vim (CNVD-2022-55381)

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.0044 that stems from a heap-based buffer overflow. No details of the vulnerability are provided at this time...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-1984)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 - Use after free in utfptr2char in GitHub repository vim/vim...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5507-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5507-1 advisory. It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected...

CVE-2022-2344

CVE-2022-2344 is a heap-based buffer overflow in vim/vim prior to 9.0.0045. The connected advisories/bulletins identify Vim as affected and describe a heap-based overflow arising when processing crafted input files. The primary root cause is memory handling in Vim leading to crashes or memory cor...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1984)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2022:2263-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2263-1 advisory. - ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. CVE-2019-17540 - ...

SUSE-SU-2022:2263-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/ps.c. bsc1153866 - CVE-2022-32545: Fixed an outside the range of representable values of type. bsc1200388 - CVE-2022-32546: Fixed an outside the range of representabl...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2022:2254-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2254-1 advisory. - A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc functio...

openSUSE: Security Advisory for ImageMagick (SUSE-SU-2022:2259-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2022:2260-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2260-1 advisory. - A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursoralloc functio...

CVE-2022-2284

CVE-2022-2284 affects vim/vim prior to 9.0; described as a heap-based buffer overflow. Connected Apple/ALAS advisories list Vim as affected and provide upgrade paths to Vim 9.x (e.g., package updates in Vim 9.0 series) as remediation. No exploitation details are provided in the supplied documents...

Moderate: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CODESYS Gateway Server (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS GmbH Equipment: CODESYS Gateway Server Vulnerability: Heap Based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-15-258-02 3S...

vim security update

8.2.2637-16.0.1 - - Remove upstream references Orabug: 31197557 2:8.2.2637-16.2 - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read 2:8.2.2637-16.1 - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior - CVE-2022-0943 vim: Heap-based Buffer Overflow occu...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5498-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5498-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file...