Lucene search
+L

8877 matches found

CNNVD
CNNVD
added 2023/11/16 12:00 a.m.5 views

Vim Resource Management Error Vulnerability

Vim is a cross-platform text editor. A resource management error vulnerability exists in versions prior to Vim v9.0.2106, which stems from the fact that when a window is closed, vim may attempt to access a window structure that has been freed...

4.3CVSS6.8AI score0.00672EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.3 views

Vim 输入验证错误漏洞

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2109, which stems from the possibility that a given large count may overflow when obtaining the count of a normal mode z command. An attacker could exploit this vulnerability to cause...

4.3CVSS6.8AI score0.00755EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.5 views

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2110, which stems from an overflow that can be inadvertently caused when parsing relative ex addresses...

4.3CVSS7AI score0.00755EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.3 views

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2111, which stems from the fact that users may overflow larger values when using the z= command...

4.3CVSS7AI score0.00694EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.6 views

Vim Input Validation Error Vulnerability

Vim is a cross-platform text editor. An input validation error vulnerability exists in versions prior to Vim v9.0.2108, which stems from the fact that the program may abort if the count after the s command is greater than the count of a long integer variable...

4.3CVSS6.9AI score0.00755EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.10 views

PT-2023-8853

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2106 Description The issue is related to the function win close in the text editor Vim, where it may try to access an already freed window structure when closing a window. This could potentially allow an attacker to...

5CVSS6.5AI score0.00755EPSS
SaveExploits0References95
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.8 views

PT-2023-8859

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2112 Description The issue is related to the use of very large values when shifting lines in operator pending mode, potentially leading to an integer overflow. This may cause a crash, although the impact is considered...

5CVSS6.8AI score0.00755EPSS
SaveExploits1References91
Positive Technologies
Positive Technologies
added 2023/11/16 12:00 a.m.8 views

PT-2023-8858

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2111 Description The issue is related to the use of the z= command in Vim, which can cause an overflow of the count with values larger than MAX INT. This can lead to a crash, but the impact is low and user interaction...

5CVSS6.7AI score0.00755EPSS
SaveExploits0References91
Amazon
Amazon
added 2023/11/15 12:00 a.m.5 views

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

5.5CVSS7AI score0.00366EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:00 a.m.35 views

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-431)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-431 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

5.5CVSS6.2AI score0.00366EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:00 a.m.32 views

Amazon Linux 2 : vim (ALAS-2023-2338)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2338 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

5.5CVSS6.2AI score0.00366EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:00 a.m.6 views

The vulnerability of the `vim_iswordp_buf` function in the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the vimiswordpbuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and even cause service interruptions through ...

7.8CVSS7.4AI score0.00493EPSS
SaveExploits1References8Affected Software2
Amazon
Amazon
added 2023/11/14 12:00 a.m.9 views

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

5.5CVSS6.9AI score0.00366EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:00 a.m.9 views

The vulnerability of the diff_write_buffer function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the diffwritebuffer function in the Vim text editor is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created file...

5.5CVSS6.6AI score0.0106EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability of the get_register function in the Vim text editor allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getregister function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

7.8CVSS6.6AI score0.00471EPSS
SaveExploits1References11Affected Software4
OSV
OSV
added 2023/11/10 11:06 a.m.6 views

OESA-2023-1796 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

4CVSS6.8AI score0.00366EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/11/10 12:00 a.m.38 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00612EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2023/11/10 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2023-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00366EPSS
SaveExploits1References4
OSV
OSV
added 2023/11/09 11:37 p.m.7 views

MGASA-2023-0314 Updated vim packages fix a security vulnerability

The updated packages fix a security vulnerability: Integer overflow in :history Ex-Command in Vim 9.0.2068...

5.5CVSS6.4AI score0.00366EPSS
SaveExploits1References3
Mageia
Mageia
added 2023/11/09 11:37 p.m.54 views

Updated vim packages fix a security vulnerability

The updated packages fix a security vulnerability: Integer overflow in :history Ex-Command in Vim 9.0.2068...

5.5CVSS7.6AI score0.00366EPSS
SaveExploits1References2
Rows per page
Query Builder