Design/Logic Flaw

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499...

CVE-2023-2426: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499...

CVE-2023-2426

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499...

CVE-2023-2426

CVE-2023-2426 affects the Vim editor (vim/vim) prior to 9.0.1499. The provided connected documents confirm a vulnerability in Vim with the root cause described as an out-of-range pointer offset in mb_charlen, leading to potential denial of service. Public advisories indicate remediation by upgrad...

PT-2023-3558

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.1499 Description The issue is related to the use of an out-of-range pointer offset in the mb charlen function in mbyte.c. This can lead to a denial of service. An attacker could exploit this by tricking a victim into...

CVE-2023-2426 Use of Out-of-range Pointer Offset in vim/vim

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499...

CVE-2023-2426 Use of Out-of-range Pointer Offset in vim/vim

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499...

Incorrect implementation of RecordParser.readKeyValue()

Lines of code Vulnerability details Impact RecordParser.readKeyValue returns a wrong value if the terminator not found. This is a fundamental library and any contract using it may experience unexpected errors and problems due to this bug. Proof of Concept The implementation logic of...

IBM Safer Payments security vulnerabilities

IBM Safer Payments is the first true payment processing cognitive fraud prevention solution from IBM USA. helps clients create customized, user-friendly decision models. A security vulnerability exists in IBM Safer Payments that stems from not properly allocating resources without limiting or...

PT-2025-54058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7-next-20230418-00549-g1e096a17625a Description The Linux kernel contains an issue in the ath11k driver related to the registration of 6Ghz-only PHYs. A 6Ghz-only PHY, where the Basic Data Format BDF does...

ModSecurity resource management error vulnerability

ModSecurity is an intrusion detection and blocking engine that can be run as a module of the Apache Web Server or as a standalone application to enhance Web application security and protect Web applications from known and unknown attacks. A security vulnerability exists in Trustwave ModSecurity...

PT-2023-18905 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore version 10.5.19 Description: A stored Cross-site Scripting XSS vulnerability exists in the Conditions tab of Pricing Rules, specifically in the From and To fields of the Date Range section. This allows an attacker to inject...

42Gears Surelock security vulnerability

42Gears Surelock is an industry-leading tool from 42Gears USA that locks devices into kiosk mode. A security vulnerability exists in 42Gears Surelock Windows versions 2.3.12 through 2.40.0, which stems from a plaintext password in the registry that allows the retrieval of administrator user...

GHSA-F9XV-Q969-PQX4 Uncaught Exception in yaml

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2...

PT-2025-53193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/fbdev-generic component that may lead to out-of-bounds access. Specifically, the issue arises from the fbdev test within the IGT Intel Graphic...

D-Link DAP-1320 < 1.21b05 RCE Vulnerability

D-Link DAP-1320 devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-21959

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful...

Qualys Cloud Agent race condition vulnerability

Qualys Cloud Agent is a lightweight application from Qualys USA, Inc. A single agent for real-time, global visibility and response. A security vulnerability exists in Qualys Cloud Agent versions prior to 3.1.3.34 through 4.5.3.1 that stems from the presence of a race condition, which could be...

PT-2023-2557 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized update,...

PT-2023-2671 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.11 Description: The issue is related to insufficient input validation in the GUI component of the Oracle Application Object Library. This can be exploited by a remote attacker to cause a...