17414 matches found
Vim del_typebuf function buffer overflow vulnerability
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0, which stems from an integer overflow or wrap-around in the deltypebuf function. An attacker can exploit the vulnerability to crash the software, modify memory, and possibly remote execution...
Vim suggest_trie_walk function buffer overflow vulnerability
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to Vim 9.0 that stems from a boundary error in the suggesttriewalk function when handling untrusted input. An attacker can exploit the vulnerability to cause a software crash, memory modification, and...
Vim inc function buffer overflow vulnerability
Vim is a cross-platform text editor. versions prior to Vim 9.0.0011 are vulnerable to a buffer overflow vulnerability that stems from a boundary error in the inc function when handling untrusted input. A remote attacker could exploit this vulnerability to crash the software, modify memory, and...
CVE-2022-2268
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE...
Vim 缓冲区错误漏洞
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to Vim 9.0 that stems from a boundary error in the suggesttriewalk function when handling untrusted input. An attacker can exploit the vulnerability to cause a software crash, memory modification, and...
Vim 输入验证错误漏洞
Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0, which stems from an integer overflow or wrap-around in the deltypebuf function. An attacker can exploit the vulnerability to crash the software, modify memory, and possibly remote execution...
vim: heap buffer overflow in vim_strncpy
A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vimstrncpy findword function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...
vim: buffer over-read in function find_next_quote
A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...
Vim 安全漏洞
Vim is a cross-platform text editor. versions prior to Vim 9.0.0011 are vulnerable to a buffer overflow vulnerability that stems from a boundary error in the inc function when handling untrusted input. A remote attacker could exploit this vulnerability to crash the software, modify memory, and...
Oracle Linux 8 : vim (ELSA-2022-5319)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5319 advisory. - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utfptr2char - CVE-2022-0361 vim:...
CVE-2022-33085
ESPCMS P8 was discovered to contain an authenticated remote code execution RCE vulnerability via the fetchfilename function at \espcmspublic\espcmstemplates\ESPCMSTemplates...
vim: heap buffer overflow in vim_strncpy
A flaw was found in vim, where it is vulnerable to a heap buffer overflow in the vimstrncpy findword function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...
CVE-2022-23718
PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code that would be executed as SYSTEM by the...
log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender
A flaw was found in the Java logging library Apache Log4j in version 1.x. JDBCAppender in Log4j 1.x is vulnerable to SQL injection in untrusted data. This allows a remote attacker to run SQL statements in the database if the deployed application is configured to use JDBCAppender with certain...
KLA12576 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1...
The vulnerability of the Microsoft SQL Server relational database management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft SQL Server relational database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted SQL query remotely...
Information Disclosure
vim is vulnerable to information disclosure. A buffer over-read in function grabfilename is capable of crashing the software, memory modification, and possible remote execution...
CVE-2019-25071
A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...
CVE-2019-25071 Apple iOS Siri Self privileges management
A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...