Lucene search
+L

18431 matches found

NVD
NVD
added 2026/08/18 4:18 p.m.11 views

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS0.00147EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:25 p.m.26 views

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS5.8AI score0.00147EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/18 3:25 p.m.93 views

CVE-2026-73073 Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS0.00147EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/08/18 3:25 p.m.11 views

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS5.9AI score0.00147EPSS
SaveExploits0
CVE
CVE
added 2026/08/18 3:25 p.m.51 views

CVE-2026-73073

Prior to Vim 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim builds a vimgrep command from a tags file's typeref:/typename: field without sufficient escaping. A crafted tag entry can inject an unterminated collection and command separator, executing arbitrary Ex/OS commands when a use...

7.1CVSS5.8AI score0.00147EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/18 3:25 p.m.21 views

CVE-2026-73073 Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...

7.1CVSS5.9AI score
SaveExploits0References5
OSV
OSV
added 2026/08/18 1:44 p.m.9 views

MINI-F857-C9JM-X8RP

Bulletin has no description...

7.5CVSS4.9AI score0.00298EPSS
SaveExploits0
OSV
OSV
added 2026/08/18 1:44 p.m.8 views

MINI-F64F-MCJP-WVXJ

Bulletin has no description...

9.6CVSS5AI score0.00692EPSS
SaveExploits0
OSV
OSV
added 2026/08/18 1:48 a.m.9 views

MINI-HVH4-C4MH-GQV4

Bulletin has no description...

5.3CVSS5AI score0.00368EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-77543

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel CRM Cloud Applications versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a low-privileged attacker with access to the infrastructure where the application executes to compromise...

7.8CVSS5.2AI score0.00161EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.19 views

PT-2026-77941

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

7.2CVSS5.1AI score0.00453EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-77957

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.8CVSS5.3AI score0.00402EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.13 views

PT-2026-77807

Name of the Vulnerable Software and Affected Versions Oracle Call Center Technology versions 12.2.3 through 12.2.15 Description An issue exists within the Internal Operations component of the Oracle Call Center Technology product of Oracle E-Business Suite. A low privileged attacker with network...

8.8CVSS5.9AI score0.00323EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.13 views

PT-2026-77638

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 12.2.1.19.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. A low privileged attacker with network access via HTTP can exploit this flaw to compromise the...

8.8CVSS5.9AI score0.00402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-78035

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw exists in the Export component of the Oracle Agile PLM product within Oracle Supply Chain. A low privileged attacker with network access via HTTP can exploit this issue to compromise the system...

8.8CVSS5.2AI score0.00301EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.18 views

PT-2026-77504

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.4 Description An issue exists in the Web Runtime SEC component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

9.8CVSS5.2AI score0.00354EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.25 views

PT-2026-77501

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.4 Description An issue exists in the E1 IOT Orchestrator Security component that allows an unauthenticated attacker with network access via TLS to compromise the...

8.1CVSS5.9AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.12 views

PT-2026-77477

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0 Description A flaw in the OIM Legacy UI component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI Remote Method...

9.9CVSS5.1AI score0.0033EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.16 views

PT-2026-78031

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...

9.8CVSS5.2AI score0.00473EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.16 views

PT-2026-78138

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full...

9.8CVSS5.2AI score0.00473EPSS
SaveExploits0References3
Rows per page
Query Builder