Lucene search
+L

7 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/11 12:00 a.m.•12 views

PHP omni-completion module runtime/autoload/phpcomplete.vim Code Execution

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module of the runtime/autoload/phpcomplete.vim text editor in Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00216EPSS
SaveExploits1References9Affected Software7
Tenable Nessus
Tenable Nessus
•added 2026/08/04 12:00 a.m.•27 views

Amazon Linux 2 : vim, --advisory ALAS2-2026-3829 (ALAS-2026-3829)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3829 advisory. Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents ...

8.4CVSS7.9AI score0.00216EPSS
SaveExploits1References6
Oracle linux
Oracle linux
•added 2026/07/30 12:00 a.m.•38 views

vim security update

9.1.083-9.0.1.el102.12 - Remove upstream references Orabug: 31197557 2:9.1.083-9.12 - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion 2:9.1.083-9.11 - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution during C omni-completion 2:9.1.083-9.10 -...

8.4CVSS8AI score0.00216EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2026/07/10 12:00 a.m.•27 views

UBUNTU-CVE-2026-59856

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...

8.4CVSS7.7AI score0.00216EPSS
SaveExploits1References5
NVD
NVD
•added 2026/07/09 11:17 p.m.•21 views

CVE-2026-59856

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...

8.4CVSS0.00216EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/07/09 10:39 p.m.•23 views

CVE-2026-59856 Vim: Arbitrary Code Execution via PHP Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...

8.4CVSS6.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/09 10:39 p.m.•15 views

CVE-2026-59856 Vim: Arbitrary Code Execution via PHP Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escaping. A name...

8.4CVSS7.7AI score0.00216EPSS
SaveExploits1References2
Rows per page
Query Builder