CVE Notify – Telegram

CVE Notify

19.5K subscribers

4 photos

239K links

Alert on the latest CVEs

Partner channel: @malwr

Download Telegram

About

Blog

Apps

Platform

19.5K subscribers

🚨 CVE-2022-44054
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0.

🎖@cveNotify

democritus-utility

Democritus functions for working with utility functions.

64 views18:06

🚨 CVE-2022-44051
The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0.

🎖@cveNotify

80 views18:06

🚨 CVE-2022-44053
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0.

🎖@cveNotify

Democritus functions for working with network requests.

87 views18:06

🚨 CVE-2022-0443
Use After Free in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

patch 8.2.4281: using freed memory with :lopen and :bwipe · vim/vim@9b4a80a

Problem: Using freed memory with :lopen and :bwipe.
Solution: Do not use a wiped out buffer.

83 views21:10

🚨 CVE-2022-0554
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

patch 8.2.4327: may end up with no current buffer · vim/vim@e3537ae

Problem: May end up with no current buffer.
Solution: When deleting the current buffer to not pick a quickfix buffer as
the new current buffer.

82 views21:10

🚨 CVE-2022-0572
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

66 views21:10

🚨 CVE-2022-0685
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.

🎖@cveNotify

39 views21:10

🚨 CVE-2022-0714
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

🎖@cveNotify

patch 8.2.4436: crash with weird 'vartabstop' value · vim/vim@4e889f9

Problem: Crash with weird 'vartabstop' value.
Solution: Check for running into the end of the line.

38 views21:10

🚨 CVE-2022-0729
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

🎖@cveNotify

Use of Out-of-range Pointer Offset in vim

24.63K developers have been protected by securing vim. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.

36 views21:10

🚨 CVE-2022-1154
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

🎖@cveNotify

Use After Free in vim

24.63K developers have been protected by securing vim. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.

34 views21:10

🚨 CVE-2022-0943
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

🎖@cveNotify

patch 8.2.4563: "z=" in Visual mode may go beyond the end of the line · vim/vim@5c68617

Problem: "z=" in Visual mode may go beyond the end of the line.
Solution: Adjust "badlen".

32 views21:10

🚨 CVE-2022-1616
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

🎖@cveNotify

patch 8.2.4895: buffer overflow with invalid command with composing c… · vim/vim@d889344

…hars

Problem: Buffer overflow with invalid command with composing chars.
Solution: Check that the whole character fits in the buffer.

32 views21:10

🚨 CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

patch 8.2.5013: after text formatting cursor may be in an invalid pos… · vim/vim@78d5288

…ition

Problem: After text formatting the cursor may be in an invalid position.
Solution: Correct the cursor position after formatting.

33 views21:10

🚨 CVE-2022-1898
Use After Free in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

patch 8.2.5024: using freed memory with "]d" · vim/vim@e2fa213

Problem: Using freed memory with "]d".
Solution: Copy the pattern before searching.

34 views21:10

🚨 CVE-2022-1968
Use After Free in GitHub repository vim/vim prior to 8.2.

🎖@cveNotify

35 views21:10

🚨 CVE-2022-1720
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.

🎖@cveNotify

patch 8.2.4956: reading past end of line with "gf" in Visual block mode · vim/vim@395bd1f

Problem: Reading past end of line with "gf" in Visual block mode.
Solution: Do not include the NUL in the length.

38 views21:10

🚨 CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.

🎖@cveNotify

patch 9.0.0018: going over the end of the typahead · vim/vim@27efc62

Problem: Going over the end of the typahead.
Solution: Put a NUL after the typeahead.

41 views21:10

🚨 CVE-2022-2304
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.

🎖@cveNotify

patch 9.0.0035: spell dump may go beyond end of an array · vim/vim@54e5fed

Problem: Spell dump may go beyond end of an array.
Solution: Limit the word length.

42 views21:10

🚨 CVE-2022-2598
Undefined Behavior for Input to API in GitHub repository vim/vim prior to 9.0.0100.

🎖@cveNotify

patch 9.0.0101: invalid memory access in diff mode with "dp" and undo · vim/vim@4e677b9

Problem: Invalid memory access in diff mode with "dp" and undo.
Solution: Make sure the line number does not go below one.

45 views21:10

🚨 CVE-2022-2946
Use After Free in GitHub repository vim/vim prior to 9.0.0246.

🎖@cveNotify

Use After Free in vim

24.63K developers have been protected by securing vim. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.

48 views21:10

🚨 CVE-2022-3099
Use After Free in GitHub repository vim/vim prior to 9.0.0360.

🎖@cveNotify

Use After Free in vim

24.63K developers have been protected by securing vim. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.

64 views21:10