8906 matches found
SUSE CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
SUSE CVE-2017-17087
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownership of the original file, which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by...
SUSE CVE-2017-1000382
VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...
SUSE CVE-2018-20786
libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...
SUSE CVE-2019-12735
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assertfails or nviminput in Neovim...
SUSE CVE-2019-20079
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory...
SUSE CVE-2019-20807
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby, or Lua...
SUSE CVE-2021-3770
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3778
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3796
vim is vulnerable to Use After Free...
SUSE CVE-2021-3872
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3875
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3903
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3928
vim is vulnerable to Use of Uninitialized Variable...
SUSE CVE-2021-3927
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3968
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3973
vim is vulnerable to Heap-based Buffer Overflow...
SUSE CVE-2021-3974
vim is vulnerable to Use After Free...