EUVD-2021-34047

Malicious code in bioql PyPI...

EUVD-2021-34032

Malicious code in bioql PyPI...

NewStart CGSL MAIN 6.06 : vim Vulnerability (NS-SA-2025-0217)

The remote NewStart CGSL host, running version MAIN 6.06, has vim packages installed that are affected by a vulnerability: - getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by...

The vulnerability of the ins_typebuf() function in the Vim text editor allows a hacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the instypebuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, and even cause...

Ubuntu 24.04 LTS / 25.04 : Vim vulnerabilities (USN-7748-1)

The remote Ubuntu 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7748-1 advisory. It was discovered that Vim incorrectly handled file extraction when opening maliciously crafted zip or tar archives. An attacker could possibly u...

USN-7748-1 vim vulnerabilities

It was discovered that Vim incorrectly handled file extraction when opening maliciously crafted zip or tar archives. An attacker could possibly use this issue to create or overwrite files on the system and execute arbitrary code...

Updated vim packages fix vulnerabilities

Path traversal issue with tar.vim and special crafted tar archives in Vim 9.1.1552. CVE-2025-53905 Path traversal issue with zip.vim and special crafted zip archives in Vim v9.1.1551. CVE-2025-53906...

Linux Distros Unpatched Vulnerability : CVE-2025-9390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. T...

Linux Distros Unpatched Vulnerability : CVE-2024-45306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the curs...

Linux Distros Unpatched Vulnerability : CVE-2025-55158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operation...

Linux Distros Unpatched Vulnerability : CVE-2025-53906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's zip.vim plugin can allow overwriting of arbitrary...

Vim 9.1.1459 < 9.1.1616 XXD Fortify Buffer Overflow (17944)

The version of Vim installed on the remote host is 9.1.1459 prior to 9.1.1616. It is, therefore, affected by a vulnerability as referenced in the 17944 advisory. - A security flaw has been discovered in vim up to 9.1.1616. Affected by this vulnerability is the function main of the file...

Linux Distros Unpatched Vulnerability : CVE-2025-26603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and...

CVE-2025-9389

A vulnerability was identified in vim 9.1.0000. Affected is the function memmoveavxunalignederms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack needs to be performed locally. The exploit is publicly available and might be used. Some users are not...

CVE-2025-9390

A vulnerability was found in the xxd component of Vim in the main function of src/xxd/xxd.c. This flaw allows a local attacker to trigger a buffer overflow, which leads to a denial of service. Mitigation Upgrade to Vim version 9.1.1616 or later to address this issue...

DEBIAN-CVE-2025-9390

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be...

AZL-66681 CVE-2025-9390 affecting package vim for versions less than 9.1.1616-1

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be...

CVE-2025-9390

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be...

AZL-66683 CVE-2025-9390 affecting package vim for versions less than 9.1.1616-1

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be...

CVE-2025-9390

CVE-2025-9390 affects Vim’s xxd feature: the vulnerability resides in the function main of src/xxd/xxd.c, allowing a local buffer overflow. Affected versions are Vim up to 9.1.1615; Vim 9.1.1616 fixes the issue, with patch eeef7c77436a78cd27047b0f5fa6925d56de3cb0. The public exploit exists and an...