2022-09-25 - CVE Archive

CVE-2022-3297 Sep 25, 19:15 HIGH POC PATCH This Week

Use After Free in GitHub repository vim/vim prior to 9.0.0579. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Use After Free Memory Corruption Fedora Vim +1

NVD GitHub

CVSS 3.1

7.8

EPSS

0.5%

CVE-2022-3296 Sep 25, 17:15 HIGH POC PATCH This Week

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Stack Overflow Fedora Vim Fedoraproject

NVD GitHub

CVSS 3.1

7.8

EPSS

0.5%

CVE-2022-41343 Sep 25, 19:15 HIGH POC PATCH This Week

registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Information Disclosure Path Traversal Dompdf Dompdf Project

NVD GitHub

CVSS 3.1

7.5

EPSS

4.2%