DEBIAN-CVE-2026-59857

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen MAXWLEN, allowing reslen...

CVE-2026-59857

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen MAXWLEN, allowing reslen...

PT-2026-57014

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0725 Description A flaw exists in the single-byte branch of the spell soundfold sal function within src/spell.c. When translating a word using a spell file's SAL sound-folding rules into a caller-owned result buffer,...

EUVD-2024-2814

Malicious code in bioql PyPI...

CVE-2020-26205

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

GHSA-HV38-H5PJ-C96J OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

CVE-2024-46942

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

CVE-2024-46942

CVE-2024-46942 affects OpenDaylight MD-SAL up to version 13.0.1, where a controller with a follower role can configure flow entries in a clustering deployment. This is documented across multiple sources (Red Hat advisory, Veracode entry, GHSA, OSV, CVE lists). The underlying issue is improper enf...

CVE-2024-46942

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

CVE-2024-46942

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

Malicious code in sal-stack-lwip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d946218f7aa8ac2e92c864ffba5062ee0a2a88093365218e2ba69cbf1ac25df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5911 Malicious code in sal-stack-lwip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d946218f7aa8ac2e92c864ffba5062ee0a2a88093365218e2ba69cbf1ac25df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.opendaylight.groupbasedpolicy:groupbasedpolicy (>=0.1.0-Helium <=0.1.2-Helium-SR2), org.opendaylight.openflowplugin:openflowplugin-extension-nicira (>=0.0.3-Helium <=0.0.5-Helium-SR2) +2 more potentially affected by CVE-2015-1611 +1 more via org.opendaylight.openflowplugin:openflowplugin (>=0.0.3-Helium <=0.0.5-Helium-SR2)

org.opendaylight.openflowplugin:openflowplugin MAVEN version =0.0.3-Helium, =0.1.0-Helium, =0.0.3-Helium, =0.0.3-Helium, =1.0.0-Helium, =1.0.2-Helium-SR2 Source cves: CVE-2015-1611, CVE-2015-1612 Source advisory: OSV:GHSA-49WF-927P-JPVJ...

CVE-2020-26205

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

CVE-2020-26205

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

Spoofing

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

CVE-2020-26205 XSS in Sal

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machinelist view...

CVE-2020-26205

CVE-2020-26205 affects Sal, a multi-tenant reporting dashboard for Munki that displays data from Facter. The connected sources describe an XSS vulnerability in the machine_list view present up to Sal version 4.1.6. The vulnerability is surfaced via input that can be reflected into the page, enabl...

HackerOne: Blind Stored XSS in HackerOne's Sal 4.1.4.2149 (sal.████.com)

The page located at https://sal.██████.com/list/Activity/hour/all/0/ suffers from a Cross-site Scripting XSS vulnerability when a user has set their hostname on their machine to an XSS payload. Vulnerable Page https://sal.██████.com/list/Activity/hour/all/0/ Victim IP Address ███████ Referer...