482 matches found
SUSE CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as 1 termcap, 2 printdevice, 3 titleold, 4 filetype, 5 syntax, 6 backupext, 7 keymap, 8 patchmode, or 9 langmenu...
SUSE CVE-2008-3076
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the 1 mz and 2 mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases. NOTE: this issue...
SUSE CVE-2019-12735
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assertfails or nviminput in Neovim...
SUSE CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
SUSE CVE-2022-0351
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-0361
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-0572
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-0943
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563...
SUSE CVE-2022-1725
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959...
SUSE CVE-2022-1886
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-1968
Use After Free in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-2206
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-2210
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...
SUSE CVE-2022-2819
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211...
SUSE CVE-2022-2862
Use After Free in GitHub repository vim/vim prior to 9.0.0221...
SUSE CVE-2022-3016
Use After Free in GitHub repository vim/vim prior to 9.0.0286...
SUSE CVE-2022-3234
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483...
SUSE CVE-2022-3705
A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to...