Lucene search
+L

2 matches found

Mageia
Mageia
added 2020/02/13 10:49 a.m.46 views

Updated vim and neovim packages fix security vulnerability

Updated vim and neovim package fixes security vulnerability: It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the :source! command when executed in a sandbox. This allows remote attackers to take advantage of the modeline feature to inject arbitrary commands whe...

9.3CVSS6.2AI score0.19111EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
added 2016/11/22 12:0 a.m.7 views

PT-2019-3260

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.1.1365 Neovim versions prior to 0.3.6 Description The issue is related to the lack of filtering in the :source! command in a modeline, which allows remote attackers to execute arbitrary OS commands. This can lead to...

9.8CVSS7.2AI score0.19111EPSS
SaveExploits7References100
Rows per page
Query Builder