CVEs (3,171)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
3Apple FedoraprojectVim3Fedora MacosVimJun 17, 2026 May 17, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. |
3Apple FedoraprojectVim3Fedora MacosVimJun 17, 2026 May 17, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968. |
3Apple FedoraprojectVim3Fedora MacosVimOct 8, 2026 May 12, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause...Show more |
4Apple FedoraprojectLibtiff+1 more7Fedora Iphone OsLibtiff+4 moreJun 17, 2026 May 11, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is avai...Show more |
3Apple FedoraprojectVim3Fedora MacosVimJun 17, 2026 May 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution |
4Apple DebianFedoraproject+1 more4Debian Linux FedoraMacos+1 moreJun 17, 2026 May 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |
3Apple DebianRuby Lang3Debian Linux MacosRubyJun 17, 2026 May 9, 2022 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f. |
3Apple FedoraprojectVim3Fedora MacosVimOct 8, 2026 May 8, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause...Show more |
5Apple DebianFedoraproject+2 more6Debian Linux FedoraHci Management Node+3 moreOct 8, 2026 May 8, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution |
4Apple DebianFedoraproject+1 more4Debian Linux FedoraMacos+1 moreOct 8, 2026 May 7, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |
3Apple FedoraprojectVim3Fedora MacosVimJun 17, 2026 Apr 21, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. |
4Apple DebianGnu+1 more4Debian Linux MacosNcurses+1 moreJul 27, 2026 Apr 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. |
3Apple FedoraprojectVim3Fedora MacosVimJun 17, 2026 Apr 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |
2Apple Jenkins2Macos SubversionJun 17, 2026 Apr 12, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL. |
Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnera...Show more |
4Apache AppleDebian+1 more4Debian Linux FedoraMacos+1 moreJun 17, 2026 Apr 12, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn se...Show more |
4Apache AppleDebian+1 more4Debian Linux FedoraMacos+1 moreJun 17, 2026 Apr 12, 2022 N/A· v4 4.3 MEDIUM· v3 3.5 LOW· v2 Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied...Show more |
4Apple DebianFedoraproject+1 more4Debian Linux FedoraMacos+1 moreJun 17, 2026 Apr 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents...Show more |
11Apple AzulDebian+8 more27Active Iq Unified Manager Debian LinuxE Series Santricity Os Controller+24 moreOct 14, 2026 Mar 25, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. |
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges. |