Lucene search
+L

72 matches found

OSV
OSV
added 2023/07/27 10:15 p.m.5 views

CVE-2022-43703

An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being loaded or executed instead of the intended files...

7.8CVSS5.8AI score0.00183EPSS
Exploits0References2
OSV
OSV
added 2023/06/02 11:15 a.m.6 views

CVE-2023-25780

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

5.7CVSS6.3AI score0.00252EPSS
Exploits0References1
Prion
Prion
added 2023/06/02 11:15 a.m.21 views

Authentication flaw

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

2.7CVSS5.8AI score0.00252EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/06/02 12:0 a.m.53 views

CVE-2023-25780

Status PowerBPM is affected by an access control/authentication flaw. The vulnerability allows a LAN attacker with normal user privileges to modify the substitute agent for arbitrary users, potentially leading to serious consequences. Documents refer to insufficient authentication in a specific S...

5.7CVSS5.7AI score0.00252EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/05/30 9:3 a.m.3 views

CVE-2023-25780

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

5.7CVSS6AI score0.00252EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.4 views

SUSE CVE-2014-3197

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a...

5CVSS8.3AI score0.00963EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.7 views

SUSE CVE-2020-27770

Due to a missing check for 0 value of replaceextent, it is possible for offset p to overflow in SubstituteString, causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to...

5.3CVSS6.6AI score0.01133EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:30 a.m.5 views

SUSE CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.3CVSS8.5AI score0.00423EPSS
Exploits1References18
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:0 a.m.30 views

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1403)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the...

7.8CVSS5.6AI score0.01196EPSS
Exploits1References3
OSV
OSV
added 2022/11/25 2:15 p.m.9 views

AZL-11504 CVE-2022-4141 affecting package vim for versions less than 9.0.0982-1

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.4AI score0.00423EPSS
Exploits1References1
NVD
NVD
added 2022/11/25 2:15 p.m.17 views

CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS0.00423EPSS
Exploits1References7
OSV
OSV
added 2022/11/25 2:15 p.m.2 views

ALPINE-CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.5AI score0.00423EPSS
Exploits1References1
OSV
OSV
added 2022/11/25 2:15 p.m.3 views

DEBIAN-CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.9AI score0.00423EPSS
Exploits1References1
Prion
Prion
added 2022/11/25 2:15 p.m.19 views

Heap overflow

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

4.4CVSS7.7AI score0.00423EPSS
Exploits1References6Affected Software2
UbuntuCve
UbuntuCve
added 2022/11/25 2:15 p.m.67 views

CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.3AI score0.00423EPSS
Exploits1References1
OSV
OSV
added 2022/11/25 2:15 p.m.4 views

UBUNTU-CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.4AI score0.00423EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2022/11/25 12:0 a.m.22 views

CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.9AI score0.00423EPSS
Exploits1
Cvelist
Cvelist
added 2022/11/25 12:0 a.m.53 views

CVE-2022-4141 Heap-based Buffer Overflow in vim/vim

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.3CVSS9.1AI score0.00423EPSS
Exploits1References6
OSV
OSV
added 2022/11/25 12:0 a.m.49 views

CVE-2022-4141 Heap-based Buffer Overflow in vim/vim

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.3CVSS7.9AI score0.00423EPSS
Exploits1References9
AlpineLinux
AlpineLinux
added 2022/11/25 12:0 a.m.32 views

CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

7.8CVSS7.8AI score0.00423EPSS
Exploits1
Rows per page
Query Builder