Lucene search
+L

10290 matches found

Mend
Mend
•added 2025/02/18 7:04 p.m.•3 views

CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the ":redir" ex command to register, variables and files. It also allows to show the contents of registers using the ":registers" or ":display" ex command. When redirecting the output of...

4.2CVSS0.00237EPSS
SaveExploits0References7
CVE
CVE
•added 2025/02/18 7:04 p.m.•145 views

CVE-2025-26603

Vim (up to 9.1.1115) is affected by CVE-2025-26603: a use-after-free when redirecting :display output to a register that is currently being displayed, which can involve the clipboard registers (+/*) and may affect 0. The issue stems from an incomplete check in ex_display(); it does not properly p...

4.2CVSS7.2AI score0.00237EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2025/02/18 7:04 p.m.•19 views

CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

4.2CVSS5AI score0.00237EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/02/18 7:04 p.m.•53 views

CVE-2025-26603 heap-use-after-free in function str_to_reg in vim/vim

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

4.2CVSS0.00237EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/02/18 7:04 p.m.•19 views

CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

4.2CVSS4.5AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•13 views

PT-2025-7202 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1115 Description: The issue arises when redirecting the output of the :display command to a register that is being displayed, leading to a use-after-free. This occurs because Vim frees the register content before...

7.8CVSS4.7AI score0.22474EPSS
SaveExploits1References45
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•2 views

CVE-2025-26603: Use After Free

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

4.2CVSS5.6AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•9 views

Vim 资源管理错误漏洞

Vim is a cross-platform text editor open-sourced by Vim. A resource management error vulnerability exists in Vim versions prior to 9.1.1115, which stems from memory reuse after release...

4.2CVSS4.1AI score0.00237EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/02/14 6:55 a.m.•9 views

SUSE CVE-2023-3896

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3...

7.8CVSS6.3AI score0.00414EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2025/02/14 3:52 a.m.•8 views

SUSE CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

2.8CVSS3.4AI score0.00541EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
•added 2025/02/12 9:47 p.m.•16 views

CVE-2025-1215

A flaw was found in Vim. A local user may be able to trigger memory corruption by using the --log option with a non-existent path, which can lead to an application crash or other undefined behavior...

2.8CVSS6.9AI score0.00541EPSS
SaveExploits1References9
OSV
OSV
•added 2025/02/12 7:15 p.m.•17 views

AZL-56708 CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS5.4AI score0.00541EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/12 7:15 p.m.•15 views

AZL-56770 CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS5.4AI score0.00541EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/12 7:15 p.m.•20 views

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS0.00541EPSS
SaveExploits1References7
OSV
OSV
•added 2025/02/12 7:15 p.m.•2 views

DEBIAN-CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS3.5AI score0.00541EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/12 7:15 p.m.•26 views

UBUNTU-CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS5.2AI score0.00541EPSS
SaveExploits1References9
Mend
Mend
•added 2025/02/12 6:31 p.m.•1 views

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

7.8CVSS0.00541EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2025/02/12 6:31 p.m.•33 views

CVE-2025-1215 vim main.c memory corruption

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

2.8CVSS4.1AI score0.00541EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/02/12 6:31 p.m.•52 views

CVE-2025-1215 vim main.c memory corruption

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

2.8CVSS0.00541EPSS
SaveExploits1References6
CVE
CVE
•added 2025/02/12 6:31 p.m.•198 views

CVE-2025-1215

CVE-2025-1215 affects vim up to 9.1.1096, with memory corruption caused by manipulation of the --log argument in an unspecified code path of src/main.c. Exploitation is described as a local attack (attack vector: LOCAL) and could impact confidentiality, integrity, and availability as indicated by...

7.8CVSS4AI score0.00541EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder