Lucene search
+L

48 matches found

Mageia
Mageia
added 2026/04/06 5:35 p.m.17 views

Updated vim packages fix security vulnerabilities

Vim modeline bypass via various options affects Vim 9.2.0276. CVE-2026-34982 Path traversal issue with zip.vim in Vim v9.2.0280. CVE-2026-35177...

8.2CVSS6AI score0.0047EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/06 3:16 p.m.272 views

CVE-2026-34982

CVE-2026-34982 is a Vim modeline sandbox bypass. Prior to Vim 9.2.0276, a crafted file can trigger arbitrary OS command execution due to a modeline vulnerability. The issue arises because the complete, guitabtooltip and printheader options miss the P_MLE flag, allowing a modeline to be executed, ...

8.2CVSS6.3AI score0.0047EPSS
SaveExploits0References35Affected Software1
Debian CVE
Debian CVE
added 2026/04/06 3:16 p.m.13 views

CVE-2026-34982

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

8.2CVSS6.1AI score0.0047EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/04/06 3:16 p.m.32 views

CVE-2026-34982

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

8.2CVSS6.3AI score0.0047EPSS
SaveExploits0References35
Vulnrichment
Vulnrichment
added 2026/04/06 3:16 p.m.5 views

CVE-2026-34982 Vim modeline bypass via various options affects Vim < 9.2.0276

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

8.2CVSS6.3AI score0.0047EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/06 3:16 p.m.70 views

CVE-2026-34982 Vim modeline bypass via various options affects Vim < 9.2.0276

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

8.2CVSS0.0047EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2019/06/11 4:00 p.m.116 views

Linux Command-Line Editors Vulnerable to High-Severity Bug

A high-severity bug impacting two popular command-line text editing applications, Vim and Neovim, allow remote attackers to execute arbitrary OS commands. Security researcher Armin Razmjou warned that exploiting the bug is as easy as tricking a target into clicking on a specially crafted text fil...

9.3CVSS2.8AI score0.18964EPSS
SaveExploits5References4
The Hacker News
The Hacker News
added 2019/06/10 6:26 p.m.3 views

Your Linux Can Get Hacked Just by Opening a File in Vim or Neovim Editor

Linux users, beware! If you haven't recently updated your Linux operating system, especially the command-line text editor utility, do not even try to view the content of a file using Vim or Neovim. Security researcher Armin Razmjou recently discovered a high-severity arbitrary OS command executio...

9.3CVSS8.1AI score0.18964EPSS
SaveExploits5
Rows per page
Query Builder