Lucene search
+L

10897 matches found

osv_ubuntu
osv_ubuntu
•added 2025/01/13 9:15 p.m.•18 views

UBUNTU-CVE-2025-22134

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

5.5CVSS6.2AI score0.00375EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2025/01/13 8:41 p.m.•26 views

CVE-2025-22134 heap-buffer-overflow with visual mode in Vim < 9.1.1003

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

4.2CVSS4.5AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/01/13 8:41 p.m.•121 views

CVE-2025-22134 heap-buffer-overflow with visual mode in Vim < 9.1.1003

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

4.2CVSS0.00375EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/13 8:41 p.m.•186 views

CVE-2025-22134

Vim vulnerable to a heap-buffer overflow when switching buffers with Visual mode active via :all. Root cause: Vim does not end Visual mode before opening other windows/buffers, risking access beyond the end of a line. A fix is available in Vim patch 9.1.1003, which properly resets Visual mode and...

5.5CVSS4.7AI score0.00375EPSS
SaveExploits0References4Affected Software2
AlpineLinux
AlpineLinux
•added 2025/01/13 8:41 p.m.•29 views

CVE-2025-22134

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

5.5CVSS7.2AI score0.00375EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/01/13 8:41 p.m.•18 views

CVE-2025-22134

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

5.5CVSS5.3AI score0.00375EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/01/13 8:41 p.m.•60 views

CVE-2025-22134 heap-buffer-overflow with visual mode in Vim < 9.1.1003

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

4.2CVSS7AI score0.00375EPSS
SaveExploits0References2
Mend
Mend
•added 2025/01/13 8:41 p.m.•6 views

CVE-2025-22134

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visu...

5.5CVSS0.00375EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•40 views

CVE-2023-42247

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/smonitormap.php...

0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•36 views

CVE-2023-42246

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /vam/vamep.php...

0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/13 12:00 a.m.•65 views

CVE-2023-42246

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation in the /vam/vam_ep.php API endpoint. This flaw allows an attacker to inject malicious scripts into...

6.1CVSS6AI score0.00239EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/13 12:00 a.m.•11 views

CVE-2023-42246

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /vam/vamep.php...

5.9AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•20 views

PT-2025-1472 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager versions prior to 4.42.2 Description: The issue is related to Cross Site Scripting XSS that can be exploited via the "/vam/vam ep.php" API endpoint. This allows for malicious scripts to be injected into the...

6.1CVSS6AI score0.00239EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/13 12:00 a.m.•16 views

Selesta Visual Access Manager 安全漏洞

Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in the Selesta Visual Access Manager vamep.php file, no details of the vulnerability are available at this time...

6.1CVSS6.2AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/13 12:00 a.m.•63 views

CVE-2023-42247

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross Site Scripting (XSS) vulnerability via the monitor/s_monitor_map.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data, which could allow for potential malicious script ex...

6.1CVSS6AI score0.00239EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/13 12:00 a.m.•11 views

CVE-2023-42247

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/smonitormap.php...

5.9AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/13 12:00 a.m.•30 views

CVE-2023-42244

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamvisits.php...

0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/13 12:00 a.m.•70 views

CVE-2023-42244

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The flaw stems from a lack of validation of externally entered SQL statements within the application. An authenticated attacker can exploit this by targeting multiple POST parameters of the /va...

8.8CVSS8.2AI score0.00393EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/13 12:00 a.m.•12 views

CVE-2023-42244

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamvisits.php...

7.9AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•26 views

PT-2025-1470 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can perform SQL Injection in multiple POST parameters of the "/vam/vam...

8.8CVSS7.9AI score0.00393EPSS
SaveExploits0References5
Rows per page
Query Builder