98 matches found
CVE-2026-112944
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...
CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...
EUVD-2026-105045
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...
CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...
CVE-2026-112944
The launch-editor Node.js package is vulnerable to argument injection prior to version 2.14.2 . When an attacker can create a filesystem entry starting with a plus (+) or minus (-) in the working directory, launchEditor may forward this path without forcing it to be interpreted as a positional fi...
gvim-9.2.0530-1.1 on GA media (moderate)
gvim-9.2.0530-1.1 on GA media Announcement ID: openSUSE-SU-2026:11114-1 Rating: moderate Cross-References: CVE-2026-42307 CVE-2026-43961 CVE-2026-44656 CVE-2026-45130 CVE-2026-46483 CVSS scores: CVE-2026-43961 SUSE : 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L CVE-2026-43961 SUSE : 5.4...
OPENSUSE-SU-2026:11114-1 gvim-9.2.0530-1.1 on GA media
These are all security issues fixed in the gvim-9.2.0530-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 43 : vim (2026-75b5ddf8c3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-75b5ddf8c3 advisory. keep GTK4 in rawhide for now ---- switch to GTK4 for GVim Fix CVE-2026-46483 Tenable has extracted the preceding description block directly from the...
gvim-9.2.0398-1.1 on GA media (moderate)
gvim-9.2.0398-1.1 on GA media Announcement ID: openSUSE-SU-2026:10652-1 Rating: moderate Cross-References: CVE-2026-33412 CVE-2026-34714 CVE-2026-34982 CVE-2026-39881 CVSS scores: CVE-2026-33412 SUSE : 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N CVE-2026-33412 SUSE : 5.8...
OPENSUSE-SU-2026:10652-1 gvim-9.2.0398-1.1 on GA media
These are all security issues fixed in the gvim-9.2.0398-1.1 package on the GA media of openSUSE Tumbleweed...
Vim, gVim: Multiple Vulnerabilities
Background Vim is an efficient, highly configurable improved version of the classic ‘vi’ text editor. gVim is the GUI version of Vim. Description Multiple vulnerabilities have been discovered in Vim, gVim. Please review the CVE identifiers referenced below for details. Impact Please review the...
GLSA-202601-02 : Vim, gVim: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202601-02 Vim, gVim: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Vim, gVim. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block direct...
EUVD-2010-3892
Malware in sbrugna...
EUVD-2022-39826
Malicious code in bioql PyPI...
CVE-2022-37173
An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...
CVE-2010-3914
Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in...
OPENSUSE-SU-2024:12905-1 gvim-9.0.1504-1.1 on GA media
These are all security issues fixed in the gvim-9.0.1504-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12328-1 gvim-9.0.0453-1.1 on GA media
These are all security issues fixed in the gvim-9.0.0453-1.1 package on the GA media of openSUSE Tumbleweed...