Lucene search
+L

10131 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•8 views

CVE-2025-15319: Improper Link Resolution Before File Access

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools...

7.8CVSS5.8AI score0.00201EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/08 1:22 a.m.•23 views

CVE-2026-25749

A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap...

7.3CVSS7.3AI score0.00222EPSS
SaveExploits1References6
NVD
NVD
•added 2026/02/06 11:15 p.m.•23 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS0.00222EPSS
SaveExploits1References3
osv_azl
osv_azl
•added 2026/02/06 11:15 p.m.•24 views

AZL-76764 CVE-2026-25749 affecting package vim for versions less than 9.2.0088-1

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2026/02/06 11:15 p.m.•18 views

DEBIAN-CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2026/02/06 11:15 p.m.•35 views

UBUNTU-CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/02/06 11:15 p.m.•22 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS7AI score0.00222EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2026/02/06 10:43 p.m.•25 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/02/06 10:43 p.m.•59 views

CVE-2026-25749 Heap Overflow in Vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS0.00222EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/02/06 10:43 p.m.•19 views

CVE-2026-25749 Heap Overflow in Vim

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS5.5AI score
SaveExploits0References5
CVE
CVE
•added 2026/02/06 10:43 p.m.•81 views

CVE-2026-25749

Vim (editor) is affected by CVE-2026-25749 prior to version 9.1.2132, where the tag file resolution logic mishandles the helpfile option. In get_tagfname() (src/tag.c) the user-controlled helpfile value is copied into a fixed-size heap buffer (MAXPATHL+1, ~4097 bytes) via an unsafe STRCPY without...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References3Affected Software2
attackerkb
attackerkb
•added 2026/02/06 10:43 p.m.•18 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
•added 2026/02/06 10:43 p.m.•19 views

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

6.6CVSS6.8AI score0.00222EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•18 views

PT-2026-71984

Name of the Vulnerable Software and Affected Versions actix-files versions prior to 0.6.10 Description An information exposure issue exists when a non-existing folder is provided as the serve from argument to the Files::new function. In this scenario, the mount path defaults to an empty path, and...

6.3CVSS5.8AI score0.00469EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•25 views

PT-2026-6666

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 4.1.1 Description A flaw exists in Free5GC’s SMF component, specifically within the ResolveNodeIdToIp function located in the internal/sbi/processor/datapath.go file. This issue can lead to a denial of service. Remote...

7.5CVSS5.8AI score0.0058EPSS
SaveExploits1References13
NVD
NVD
•added 2026/02/05 7:15 p.m.•20 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS0.00194EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/05 7:15 p.m.•22 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.8AI score0.00194EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/05 6:24 p.m.•11 views

CVE-2025-15328

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS5.3AI score0.00194EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/02/05 6:24 p.m.•36 views

CVE-2025-15328

CVE-2025-15328 describes an improper link resolution before file access in Tanium Enforce. Documents indicate Tanium addressed the issue, but provide no explicit affected versions, patch version, or detailed root cause beyond the general flaw. The PT-Security entry warns of potential unauthorized...

5CVSS5.8AI score0.00194EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/05 6:24 p.m.•44 views

CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.

Tanium addressed an improper link resolution before file access vulnerability in Enforce...

5CVSS0.00194EPSS
SaveExploits0References1
Rows per page
Query Builder