28 matches found
PT-2026-83546
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash sql allows a user who supplies a search term to contains/2, string starts with/2, or string ends with/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlle...
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
SummaryThe built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. Patterns containing regex metacharacters were compiled with Python's backtracking re engine and run against every line of every reachable file, with no time limit anywhere on that...
AZL-92160 CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...
ALPINE-CVE-2026-59856
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...
CVE-2022-45899: Improper Neutralization of Special Elements used in an OS Command
Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...
CVE-2022-45899
Nokia Broadcast Message Center (BMC) versions prior to 13.1 are vulnerable to an OS command injection vulnerability (CVE-2022-45899). An unauthenticated remote attacker can execute arbitrary commands with root privileges by providing shell metacharacters in the Log Scanner Search Pattern field of...
CVE-2022-45899
Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...
EUVD-2023-1019
Malicious code in bioql PyPI...
EUVD-2024-40450
Malicious code in bioql PyPI...
CVE-2024-43790
A vulnerability was found in the VIM package. When performing a search and displaying the search count message is disabled, the search pattern is shown at the bottom of the screen, and this text is stored in an internal buffer. The search pattern is reversed when using the right-left search mode,...
Vim < 9.1.0689 Heap Buffer Overflow
The version of Vim installed on the remote host is after 9.1.0425 and prior to 9.1.0689. It is, therefore, affected by a heap buffer overflow vulnerability. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of t...
SUSE CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
DEBIAN-CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
ALPINE-CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
CVE-2024-43790
Vim (editors) vulnerable to CVE-2024-43790: when using search with shm+=S and rl enabled, Vim allocates a reversed buffer for the search pattern; if the pattern contains ASCII NULs, strlen() stops early, causing a buffer size mismatch and an out-of-bounds read/write in msgbuf. Newer Vim patches f...
CVE-2024-43790 heap-buffer-overflow in do_search() in Vim < 9.1.0689
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
CVE-2024-43790
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...
CVE-2024-43790 heap-buffer-overflow in do_search() in Vim < 9.1.0689
Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled :set shm+=S, the search pattern is displayed at the bottom of the screen in a buffer msgbuf. When right-left mode :set rl is enabled, the search pattern is reversed. This...