Lucene search
+L

10361 matches found

OpenVAS
OpenVAS
•added 2022/11/03 12:00 a.m.•50 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2703)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.01407EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
•added 2022/11/02 12:00 a.m.•51 views

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2671)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2257 - Use After Free in GitHub repository vim/vim prior to 9.0. CVE-2022-22...

7.8CVSS6.5AI score0.01407EPSS
SaveExploits10References11
RedhatCVE
RedhatCVE
•added 2022/11/01 12:26 p.m.•76 views

CVE-2022-3705

A use-after-free flaw was found in the qfupdatebuffer function in vim. This issue allows a specially crafted file to crash a program, use unexpected values, or execute code...

7CVSS3.2AI score0.01334EPSS
SaveExploits0References4
Slackware Linux
Slackware Linux
•added 2022/10/31 11:46 p.m.•38 views

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.0.0814-i586-1slack15.0.txz: Upgraded. A vulnerability was found in vim and classified as problematic. Affected by this issue is th...

7.5CVSS0.3AI score0.01334EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/10/30 12:00 a.m.•7 views

PT-2022-7577

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0882 Description The issue is related to a use after free error in the did set spelllang function, located in the spell.c file of the Vim text editor. This error occurs when memory is accessed after it has been freed,...

7.8CVSS6.6AI score0.00674EPSS
SaveExploits2References69
Veracode
Veracode
•added 2022/10/29 7:48 a.m.•27 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to the use after free in the qfupdatebuffer function of quickfix.c, allowing an attacker to cause an application crash through malicious input...

7.5CVSS7.5AI score0.01334EPSS
SaveExploits0References14Affected Software1
Microsoft CVE
Microsoft CVE
•added 2022/10/29 7:00 a.m.•9 views

vim autocmd quickfix.c qf_update_buffer use after free

...

7.5CVSS6.7AI score0.01334EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/10/28 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS6.7AI score0.02712EPSS
SaveExploits28References2
NVD
NVD
•added 2022/10/26 8:15 p.m.•33 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS0.01334EPSS
SaveExploits0References10
osv_debian
osv_debian
•added 2022/10/26 8:15 p.m.•9 views

DEBIAN-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.2AI score0.01334EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2022/10/26 8:15 p.m.•10 views

ALPINE-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.9AI score0.01334EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2022/10/26 8:15 p.m.•19 views

AZL-11358 CVE-2022-3705 affecting package vim for versions less than 9.0.0805-1

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.9AI score0.01334EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/10/26 8:15 p.m.•19 views

UBUNTU-CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.5AI score0.01334EPSS
SaveExploits0References5
Prion
Prion
•added 2022/10/26 8:15 p.m.•28 views

Design/Logic Flaw

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5.1CVSS7.4AI score0.01334EPSS
SaveExploits0References10Affected Software3
UbuntuCve
UbuntuCve
•added 2022/10/26 8:15 p.m.•53 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.6AI score0.01334EPSS
SaveExploits0References4
CVE
CVE
•added 2022/10/26 12:00 a.m.•242 views

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...

7.5CVSS6.7AI score0.01334EPSS
SaveExploits0References10Affected Software1
AlpineLinux
AlpineLinux
•added 2022/10/26 12:00 a.m.•63 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.5AI score0.01334EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/10/26 12:00 a.m.•6 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS6.2AI score0.01334EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•17 views

Vim skipwhite function Heap Buffer Overflow DoS

The vulnerability of the skipwhite function in the charset.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.2AI score0.01276EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•21 views

Vim ins_compl_add Heap Buffer Overflow DoS

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

9.3CVSS7.7AI score0.01295EPSS
SaveExploits1References9Affected Software3
Rows per page
Query Builder