CVE-2022-0213

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2022-0128

vim is vulnerable to Out-of-bounds Read...

Design/Logic Flaw

vim is vulnerable to Use After Free...

CVE-2021-4166

vim is vulnerable to Out-of-bounds Read...

CVE-2021-4136

vim is vulnerable to Heap-based Buffer Overflow...

OESA-2021-1463 vim security update

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fixes: vim is vulnerable to Heap-based Buffer Overflow.CVE-2021-4019 vim is vulnerable to Use After Free.CVE-2021-4069...

Updated vim packages fix security vulnerability

heap-based buffer overflow in findhelptags in src/help.c...

OESA-2021-1450 vim security update

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fixes: vim is vulnerable to Use After Free.CVE-2021-3974 vim is vulnerable to Heap-based Buffer Overflow.CVE-2021-3973...

CVE-2021-3928

vim is vulnerable to Use of Uninitialized Variable...

CVE-2021-3872

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

MGASA-2020-0082 Updated vim and neovim packages fix security vulnerability

Updated vim and neovim package fixes security vulnerability: It was discovered that Vim before 8.1.1365 and Neovim before 0.3.6 did not restrict the :source! command when executed in a sandbox. This allows remote attackers to take advantage of the modeline feature to inject arbitrary commands whe...

Important: vim

Issue Overview: It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. CVE-2019-12735 Affected Packages: vim Note: This advisory is applicable to...

DSA-4467-1 vim - security update

Bulletin has no description...

Security update for vim (important)

openSUSE Security Update: Security update for vim Announcement ID: openSUSE-SU-2019:1561-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

MGASA-2017-0275 Updated vim packages fix security vulnerabilities

Florian Larysch and Bram Moolenaar discovered that vim, an enhanced vi editor, does not properly validate values for the "filetype", "syntax" and "keymap" options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened CVE-2016-1248. A...

Debian DSA-3786-1 : vim - security update

Editor spell files passed to the vim Vi IMproved editor may result in an integer overflow in memory allocation and a resulting buffer overflow which potentially could result in the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Vim <= 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30795/info Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute...

DEBIAN-CVE-2008-6235

The Netrw plugin netrw.vim in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the 1 "D" delete command or 2 b:netrwcurdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases...