in vim/vim

Description A heap-based OOB read of size 4 occurs when a user tries to open a vim session file specified below. This happens regardless of any command line options that could be specified to restrict vim, such -Z and -m. This bug has been found on default vim build lastest commit hash...

Heap-based Buffer Overflow in vim/vim

Description 2 Heap-buffer-overflow on write in vim 1 Heap-buffer-overflow on read in vim Heap-buffer-overflow on write in vim 1 Proof of Concept Steps to reproduce: echo -n cmV0ODAwCnMvXHYvCQpzZSBhaQpzaWwwbm9ybTppDQ== | base64 -d heapowpoc1 vim -u NONE -i NONE -n -X -Z -e -m -s -S heapowpoc1 -c...

Jerryscript has an unspecified vulnerability (CNVD-2022-07250)

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in Jerryscript version 3.0.0, which originates in /jerry-core/ecma/base/ecma-helpers- A heap-based buffer overflow exists in ecmautf8stringtonumberbyradix in conversion.c. No detailed...

Buffer Overflow

chromium is vulnerable to denial-of-service DoS attacks. The library contains a heap based buffer overflow bug, allowing a malicious user to crash the system...

Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in winredrstatus in drawscreen.c because the length of the NameBuff hasn't been checked when appending a space which leads to a buffer overflow...

Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exist in the 'onefunctionarg' function in 'userfunc.c' causes a heap-based buffer overflow which could result in an application crash...

Heap-Based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the lack of sanitization of the help.ccauses a heap-based buffer overflow which could result in an application crash...

Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. The vulnerability exist due to a lack of sanitization of the memory control pointer...

Buffer Overflow

mruby is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a lack of sanitization...

openSUSE 15 Security Update : aide (openSUSE-SU-2022:0150-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0150-1 advisory. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because o...

Debian: Security Advisory (DSA-5051-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2...

CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2...

An unspecified vulnerability exists in vim (CNVD-2022-20698)

Vim is a UNIX-based editor. vim has a security vulnerability that stems from a heap-based buffer overflow in vim. No detailed vulnerability details are currently available...

Oracle MySQL Cluster Data Node Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

Oracle MySQL Cluster Data Node Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

Debian DLA-2890-1 : libspf2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2890 advisory. - libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail messag...

Oracle MySQL Cluster Data Node Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

SUSE SLED15 / SLES15 Security Update : busybox (SUSE-SU-2022:0135-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0135-1 advisory. - CVE-2011-5325: Fixed tar directory traversal bsc951562. - CVE-2015-9261: Fixed segfalts and application...