Lucene search
K

204 matches found

Positive Technologies
Positive Technologies
added 2018/08/09 12:0 a.m.1 views

PT-2018-13243 · Xkbcommon +5 · Xkbcommon +6

Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.1 libxkbcommon versions prior to 0.8.1 Description: A local attacker could crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation, due to an endless recursion in xkbcomp/expr.c...

9.8CVSS6.6AI score0.09713EPSS
Exploits0References128
Positive Technologies
Positive Technologies
added 2018/08/09 12:0 a.m.1 views

PT-2018-13247 · Xkbcommon +5 · Xkbcommon +5

Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.1 Description: The issue is related to an invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c. This could be exploited by local attackers to crash xkbcommon keymap parsers or possibly have other...

9.8CVSS7AI score0.09713EPSS
Exploits0References123
Positive Technologies
Positive Technologies
added 2018/08/09 12:0 a.m.2 views

PT-2018-13251 · Xkbcommon +5 · Xkbcommon +5

Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.2 Description: The issue is related to unchecked NULL pointer usage in the LookupModMask function in xkbcomp/expr.c. This could be exploited by local attackers to crash the xkbcommon parser by supplying a craft...

9.8CVSS6.5AI score0.09713EPSS
Exploits0References123
Check Point Advisories
Check Point Advisories
added 2016/12/28 12:0 a.m.1 views

Vim modelines Remote Command Execution (CVE-2016-1248)

A remote code execution vulnerability exists in the modeline component of Vim due to insufficient input validation when parsing the filetype, syntax, and keymap options in modelines. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a file containing a...

6.8CVSS4.5AI score0.25504EPSS
Exploits2
OSV
OSV
added 2016/11/29 12:21 a.m.2 views

USN-3139-1 vim vulnerability

Florian Larysch discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options. An attacker could trick a user into opening a file with specially crafted modelines and possibly execute arbitrary code with the user's privileges...

7.8CVSS7AI score0.25504EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2016/11/29 12:0 a.m.47 views

Ubuntu 14.04 LTS / 16.04 LTS : Vim vulnerability (USN-3139-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3139-1 advisory. Florian Larysch discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options. An attacker...

7.8CVSS7AI score0.25504EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2016/11/29 12:0 a.m.25 views

Ubuntu: Security Advisory (USN-3139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.25504EPSS
Exploits2References2
CNVD
CNVD
added 2016/11/25 12:0 a.m.2 views

Vim Input Validation Vulnerability

Vim is an open-source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used to create and change any type of text. A security vulnerability in versions prior to Vim patch 8.0.0056 stems from the program's failur...

7.8CVSS7.8AI score0.25504EPSS
Exploits2References1
OSV
OSV
added 2016/11/23 3:59 p.m.1 views

DEBIAN-CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

7.8CVSS7.7AI score0.25504EPSS
Exploits2References1
OSV
OSV
added 2016/11/23 3:59 p.m.2 views

ALPINE-CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

7.8CVSS7.6AI score0.25504EPSS
Exploits2References1
AlpineLinux
AlpineLinux
added 2016/11/23 3:0 p.m.46 views

CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

7.8CVSS7.5AI score0.25504EPSS
Exploits2
OSV
OSV
added 2016/11/23 12:0 a.m.1 views

UBUNTU-CVE-2016-1248

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened...

7.8CVSS7.1AI score0.25504EPSS
Exploits2References8
OSV
OSV
added 2016/11/22 12:0 a.m.27 views

DSA-3722-1 vim - security update

Bulletin has no description...

7.8CVSS5.9AI score0.25504EPSS
Exploits2
OSV
OSV
added 2016/11/22 12:0 a.m.18 views

DLA-718-1 vim - security update

Bulletin has no description...

7.8CVSS7.7AI score0.25504EPSS
Exploits2
Positive Technologies
Positive Technologies
added 2016/11/22 12:0 a.m.2 views

PT-2016-4670 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim versions prior to 8.0.0056 Description: The issue arises from improper validation of values for the filetype, syntax, and keymap options. This can lead to the execution of arbitrary code when a file with a specially crafted modeline is...

9.8CVSS8AI score0.25504EPSS
Exploits99References273
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Linux Kernel <= 2.6 Console Keymap Local Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15122/info The Linux kernel is susceptible to a local command-injection vulnerability via console keymap modifications. This issue occurs because unprivileged users can alter the system-wide console keymap. Local users ma...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2010/12/02 12:0 a.m.29 views

SuSE 11 Security Update : Xen (SAT Patch Number 2230)

Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...

7.2CVSS5.5AI score0.0124EPSS
Exploits1References24
Tenable Nessus
Tenable Nessus
added 2010/12/02 12:0 a.m.26 views

SuSE 11 Security Update : Xen (SAT Patch Number 2230)

Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...

7.2CVSS5.5AI score0.0124EPSS
Exploits1References24
Tenable Nessus
Tenable Nessus
added 2010/05/26 12:0 a.m.26 views

openSUSE Security Update : xen-201004 (openSUSE-SU-2010:0293-1)

Collective Xen 2010/04 Update, containing fixes for the following issues : bnc576832 - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under...

7.2CVSS5.6AI score0.0124EPSS
Exploits1References21
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.18 views

Mandriva Update for kbd MDVA-2008:174 (kbd)

Check for the Version of kbd OpenVAS Vulnerability Test Mandriva Update for kbd MDVA-2008:174 kbd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

0.1AI score
Exploits0References2
Rows per page
Query Builder