CVE-2022-22834

An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution...

CVE-2021-32434

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c...

abcm2ps 缓冲区错误漏洞

abcm2ps is a command line program by Sammy S. Individual developer in the United States. It can convert music tunes from ABC music notation to PostScript or SVG. A security vulnerability exists in abcm2ps v8.14.11 that allows remote attackers to cause a denial of service DoS via an unspecified...

DEBIAN-CVE-2022-26127

A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babelpacketexamin function in babeld/message.c...

FRRouting FRR 缓冲区错误漏洞

FRRouting FRR is a suite of software that implements and manages various IPV4 and IPV6 routing protocols. A buffer error vulnerability exists in FRRouting FRR, which stems from incorrect checking of input packet lengths in the babelpacketexamin function in babeld/message.c. A buffer overflow...

ALPINE-CVE-2022-0629

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0572

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0554

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2...

CVE-2022-0474

Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions...

CVE-2021-44978

iCMS = 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution...

UBUNTU-CVE-2022-0417

Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...

AZL-8459 CVE-2022-0408 affecting package vim for versions less than 8.2.4743-1

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

UBUNTU-CVE-2022-0413

Use After Free in GitHub repository vim/vim prior to 8.2...

DEBIAN-CVE-2022-0393

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

ALPINE-CVE-2022-0392

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...

UBUNTU-CVE-2022-0368

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).

...

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

...

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

...