23 matches found
EUVD-2008-3282
Malware in sbrugna...
EUVD-2008-3064
Malware in sbrugna...
EUVD-2022-35079
Malicious code in bioql PyPI...
EUVD-2022-24909
Malicious code in bioql PyPI...
Updated vim packages fix security vulnerability
A heap use-after-free was found in strtoreg in Vim 9.1.1115. CVE-2025-26603...
CVE-2022-4141
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...
Denial Of Service (DoS)
vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer occurs when using :mkspell with an empty .dic file which allows an attacker to cause an application crash...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to the usage of invalid index when looking for spell suggestions which causes out-of-bound reads which then lead to an application crash...
CVE-2022-1720
A heap buffer over-read vulnerability was found in Vim's grabfilename function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with "gf" in Visual block mode. This flaw allows an attacker to trick a user into opening a specially crafted...
CVE-2022-0213
vim is vulnerable to Heap-based Buffer Overflow...
CVE-2022-0128
vim is vulnerable to Out-of-bounds Read...
Design/Logic Flaw
vim is vulnerable to Use After Free...
CVE-2021-4166
vim is vulnerable to Out-of-bounds Read...
CVE-2021-4136
vim is vulnerable to Heap-based Buffer Overflow...
CVE-2021-3928
vim is vulnerable to Use of Uninitialized Variable...
CVE-2021-3770
vim is vulnerable to Heap-based Buffer Overflow...
CVE-2021-3770
vim is vulnerable to Heap-based Buffer Overflow...
Important: vim
Issue Overview: It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. CVE-2019-12735 Affected Packages: vim Note: This advisory is applicable to...
Vim <= 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30795/info Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute...
CVE-2008-2712
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...