Lucene search
+L

1945 matches found

SUSE CVE
SUSE CVE
added 2026/05/13 3:35 a.m.16 views

SUSE CVE-2026-43332

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermalzonedeviceregisterwithtrips fails after registering a thermal zone device, it needs to wait for the tz-removal completion like thermalzonedeviceunregister, ...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/05/13 3:34 a.m.25 views

SUSE CVE-2026-43425

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: kill download URB on timeout mdc800deviceread submits downloadurb and waits for completion. If the timeout fires and the device has not responded, the function returns without killing the URB, leaving it activ...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/05/12 3:30 a.m.14 views

SUSE CVE-2026-43352

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RINGCTRLABORT handling in DMA dequeue The logic used to abort the DMA ring contains several flaws: 1. The driver unconditionally issues a ring abort even when the ring has already stopped. 2. The...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/05/11 2:13 p.m.15 views

SUSE CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

4.4CVSS6AI score0.00917EPSS
SaveExploits0References13
Microsoft CVE
Microsoft CVE
added 2026/05/10 8:01 a.m.17 views

Vim: OS Command Injection via 'path' completion

...

5.3CVSS5.8AI score0.00917EPSS
SaveExploits0
OSV
OSV
added 2026/05/09 4:24 p.m.10 views

MGASA-2026-0123 Updated vim packages fix security vulnerabilities

Ex command injection in Vims NetBeans integration. CVE-2026-39881 Command injection via backtick expansion in tag filenames in Vim v9.2.0357. CVE-2026-41411 OS Command Injection in netrw affects Vim 9.2.0383. CVE-2026-42307 OS Command Injection via 'path' completion affects Vim 9.2.0435...

7.8CVSS5.8AI score0.00774EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/05/09 2:40 a.m.15 views

SUSE CVE-2026-43220

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits2References7
RedhatCVE
RedhatCVE
added 2026/05/08 11:46 p.m.19 views

CVE-2026-43432

A flaw was found in the Linux kernel's USB xHCI host controller driver. The error handling path in the xhcidisableslot function incorrectly frees only a portion of the allocated memory, leading to a memory leak of the completion structure. This issue, which can be triggered under specific hardwar...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/08 11:16 p.m.13 views

ALPINE-CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

5.3CVSS6AI score0.00917EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/08 11:16 p.m.7 views

DEBIAN-CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

5.3CVSS6AI score0.00917EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/05/08 11:16 p.m.14 views

CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

5.3CVSS6AI score0.00917EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/08 10:40 p.m.40 views

CVE-2026-44656

Summary: Vim before 9.2.0435 is affected by an OS command injection in the :find path-completion. If the path option contains backtick-enclosed shell commands, those commands execute during file-name completion. The issue arises because the path option lacks the P_SECURE flag and can be set from ...

5.3CVSS6AI score0.00917EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 10:40 p.m.13 views

CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

5.3CVSS6AI score0.00917EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/05/08 10:40 p.m.26 views

CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

5.3CVSS6AI score0.00917EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 10:40 p.m.11 views

CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

4.6CVSS6AI score0.00917EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/08 10:40 p.m.62 views

CVE-2026-44656 Vim: OS Command Injection via 'path' completion

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

4.6CVSS0.00917EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/08 10:40 p.m.18 views

EUVD-2026-28869

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

4.6CVSS6AI score0.00917EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/08 10:40 p.m.8 views

CVE-2026-44656 Vim: OS Command Injection via 'path' completion

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the pat...

4.6CVSS6.1AI score
SaveExploits0References5
EUVD
EUVD
added 2026/05/08 3:31 p.m.20 views

EUVD-2026-28658

In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RINGCTRLABORT handling in DMA dequeue The logic used to abort the DMA ring contains several flaws: 1. The driver unconditionally issues a ring abort even when the ring has already stopped. 2. The...

5.8AI score0.00128EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/08 3:31 p.m.26 views

EUVD-2026-28629

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved from CHCCNTXT0 to CHCCNTXT1. The v5.0 register definition intended to define this field in the CHCCNTXT1 fmask array but...

5.7AI score0.00353EPSS
SaveExploits0References6
Rows per page
Query Builder