Lucene search
+L

10361 matches found

BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•15 views

Vim regexp Heap Buffer Overflow DoS

The vulnerability of the vim regsubboth function in the regexp.c file of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

9.3CVSS7.4AI score0.0142EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•11 views

Vim spell_dump_compl Heap Buffer Overflow DoS

The vulnerability of the spelldumpcompl function in the spell.c component of the Vim text editor is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.6AI score0.01489EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•14 views

Vim ins_compl_add Heap Buffer Overflow DoS

The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...

9.3CVSS6.9AI score0.01377EPSS
SaveExploits1References12Affected Software4
osv_cve
osv_cve
•added 2022/10/26 12:00 a.m.•72 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS5.5AI score
SaveExploits0References12
Mend
Mend
•added 2022/10/26 12:00 a.m.•5 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS0.01334EPSS
SaveExploits0References19
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•7 views

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim that stems from a memory reuse after release issue...

7.5CVSS6.6AI score0.01334EPSS
SaveExploits0References17
Cvelist
Cvelist
•added 2022/10/26 12:00 a.m.•69 views

CVE-2022-3705 vim autocmd quickfix.c qf_update_buffer use after free

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

5CVSS8.3AI score0.01334EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/26 12:00 a.m.•5 views

CVE-2022-3705: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS5.9AI score0.01334EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2022/10/26 12:00 a.m.•63 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS6.5AI score0.01334EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/10/26 12:00 a.m.•13 views

PT-2022-5349 · Vim +8 · Vim +8

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.0805 Description: A vulnerability was found in the function qf update buffer of the file quickfix.c of the component autocmd Handler, which leads to use after free. The attack may be launched remotely, potentially...

9.8CVSS6.5AI score0.26474EPSS
SaveExploits123References604
Debian CVE
Debian CVE
•added 2022/10/26 12:00 a.m.•39 views

CVE-2022-3705

A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...

7.5CVSS7.7AI score0.01334EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2022/10/25 3:02 p.m.•63 views

Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID:CVE-2021-38185 DESCRIPTION: GNU cpio could allow a remote attacker to execute arbitrary code on the system, caused by an integer...

7.8CVSS7.9AI score0.04683EPSS
SaveExploits2Affected Software1
osv_oesa
osv_oesa
•added 2022/10/21 11:05 a.m.•10 views

OESA-2022-1999 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing.It is an improved version of the vi editor distributed with most UNIX systems. Securit...

7.8CVSS6.7AI score0.00532EPSS
SaveExploits2References3
Amazon
Amazon
•added 2022/10/21 12:00 a.m.•45 views

Low: vim

Issue Overview: A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in vim. CVE-2022-2257 A heap buffer overflow vulnerability was found in Vim's inc...

8CVSS8.1AI score0.01489EPSS
SaveExploits16
Tenable Nessus
Tenable Nessus
•added 2022/10/21 12:00 a.m.•69 views

Amazon Linux AMI : vim (ALAS-2022-1639)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1639 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in...

8CVSS7.2AI score0.01489EPSS
SaveExploits16References33
Amazon
Amazon
•added 2022/10/21 12:00 a.m.•73 views

Low: vim

Issue Overview: A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened in vim. CVE-2022-2257 A heap buffer overflow vulnerability was found in Vim's inc...

8CVSS8AI score0.01489EPSS
SaveExploits26
Tenable Nessus
Tenable Nessus
•added 2022/10/21 12:00 a.m.•61 views

Amazon Linux 2 : vim (ALAS-2022-1868)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1868 advisory. A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msgouttransspecial function. This flaw allows a specially crafted file to crash software or execute code when opened i...

8CVSS7.3AI score0.01489EPSS
SaveExploits26References53
Tenable Nessus
Tenable Nessus
•added 2022/10/20 12:00 a.m.•78 views

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-155 advisory. A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker t...

9.8CVSS6.8AI score0.26474EPSS
SaveExploits114References231
Huntr
Huntr
•added 2022/10/19 1:38 a.m.•14 views

Use After Free in function qf_get_curlist

Description Use After Free in function qfgetcurlist at quickfix.c:1932 . vim version git log commit bf72e0c67f26ea7c8fd941fdd1533c24c7b6cb43 grafted, HEAD - master, tag: v9.0.0792, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/fuzz/test/poc14huaf.dat...

0.7AI score
SaveExploits0
Mend
Mend
•added 2022/10/19 12:00 a.m.•0 views

WS-2022-0419

Use After Free in function qfgetcurlist in vim/vim...

8.8CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder