Lucene search
+L

9096 matches found

CNNVD
CNNVD
added 2022/09/06 12:00 a.m.7 views

Vim 资源管理错误漏洞

Vim is a cross-platform text editor. versions prior to Vim 9.0.0388 are vulnerable to a resource management error, which stems from post-release reuse. No detailed vulnerability details are currently available...

7.8CVSS6.8AI score0.00561EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:00 a.m.41 views

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-077 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially craft...

8.8CVSS7.5AI score0.26474EPSS
SaveExploits17References33
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:00 a.m.49 views

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-116)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-116 advisory. A heap buffer over-read vulnerability was found in Vim's grabfilename function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with gf...

8.6CVSS7.2AI score0.26474EPSS
SaveExploits38References79
CNVD
CNVD
added 2022/09/06 12:00 a.m.27 views

Vim Resource Management Error Vulnerability (CNVD-2022-62219)

Vim is a cross-platform text editor. versions prior to Vim 9.0.0359 are vulnerable to a resource management error, which stems from a post-release reuse in the function docmdline. An attacker could exploit this vulnerability to cause a denial of service attack...

7.8CVSS4.6AI score0.00493EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2022/09/06 12:00 a.m.47 views

CVE-2022-3134

Use After Free in GitHub repository vim/vim prior to 9.0.0389...

7.8CVSS7.8AI score0.00561EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/09/06 12:00 a.m.24 views

CVE-2022-3134 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0389...

7.8CVSS8AI score0.00561EPSS
SaveExploits1References4
CVE
CVE
added 2022/09/06 12:00 a.m.171 views

CVE-2022-3134

CVE-2022-3134 affects vim/vim prior to 9.0.0389. Connected advisories confirm a use-after-free in Vim (notably when closing a window during tag searches) that can crash the editor or potentially corrupt memory. Remediation in the linked documents shows that Vim has been patched in subsequent rele...

7.8CVSS7.7AI score0.00561EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2022/09/06 12:00 a.m.35 views

CVE-2022-3134

Use After Free in GitHub repository vim/vim prior to 9.0.0389...

7.8CVSS7.6AI score0.00561EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2022/09/05 9:47 a.m.45 views

CVE-2022-3016

A heap use-after-free vulnerability was found in vim's getnextvalidentry function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file,...

7.8CVSS2.9AI score0.00527EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2022/09/05 5:28 a.m.40 views

CVE-2022-3099

A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering use-after-free that causes an applicati...

7.8CVSS5.2AI score0.00493EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:00 a.m.17 views

The vulnerability of the do_cmdline() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the docmdline function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.2AI score0.00493EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:00 a.m.22 views

The vulnerability of the utf_ptr2char() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the utfptr2char function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.2AI score0.01661EPSS
SaveExploits1References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:00 a.m.27 views

The vulnerability of the Vim text editor lies in the fact that an operation can be performed outside the buffer, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.01792EPSS
SaveExploits1References16Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:00 a.m.24 views

The vulnerability of the Vim text editor lies in the fact that an operation can be performed outside the buffer, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.01461EPSS
SaveExploits1References17Affected Software10
OpenVAS
OpenVAS
added 2022/09/05 12:00 a.m.26 views

Fedora: Security Advisory for vim (FEDORA-2022-221bd89404)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.8AI score0.00525EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/09/04 10:49 p.m.75 views

[SECURITY] Fedora 36 Update: vim-9.0.348-1.fc36

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.8CVSS2.6AI score0.00525EPSS
SaveExploits1
Huntr
Huntr
added 2022/09/04 9:00 p.m.29 views

Null Dereference in vim_regcomp()

Description: Null Dereference in vimregcomp at vim/src/regexp.c:2716 Vim Version: git log commit 8f7116caddc6f0725cf1211407d97645c4eb7b65 HEAD - master, origin/master, origin/HEAD Proof of Concept: $ git clone https://github.com/vim/vim.git $ cd vim/ && ./configure && make && cd src/ $ echo "call...

1.9CVSS0.5AI score0.00487EPSS
SaveExploits1
OSV
OSV
added 2022/09/03 4:15 p.m.13 views

AZL-10828 CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1

Use After Free in GitHub repository vim/vim prior to 9.0.0360...

7.8CVSS7.1AI score0.00493EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/03 4:15 p.m.2 views

ALPINE-CVE-2022-3099

Use After Free in GitHub repository vim/vim prior to 9.0.0360...

7.8CVSS6.8AI score0.00493EPSS
SaveExploits1References1
NVD
NVD
added 2022/09/03 4:15 p.m.21 views

CVE-2022-3099

Use After Free in GitHub repository vim/vim prior to 9.0.0360...

7.8CVSS0.00493EPSS
SaveExploits1References8
Rows per page
Query Builder