vim

258 results · Feed

• Unscored —
  CVE-2017-6349

  An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not p…

  vim vim vim neovim Debian Ubuntu Alpine
  Feb 27, 2017
• Unscored —
  CVE-2017-6350

  An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does …

  vim vim vim neovim Debian Ubuntu Alpine
  Feb 27, 2017
• Unscored —
  CVE-2017-5953

  vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may resul…

  vim vim vim neovim Debian Ubuntu Alpine
  Feb 10, 2017
• Unscored —
  CVE-2016-1248 EPSS 25%

  vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which ma…

  vim vim vim neovim Debian Ubuntu Alpine
  Nov 23, 2016
• Unscored —
  CVE-2008-6235

  The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell …

  vim Debian
  Feb 21, 2009
• Unscored —
  CVE-2008-3075

  The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…

  vim Debian
  Feb 21, 2009
• Unscored —
  CVE-2008-3074

  The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary…

  vim Debian
  Feb 21, 2009
• Unscored —
  CVE-2008-3076 Public exploit

  The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell met…

  vim Debian
  Feb 21, 2009
• Unscored —
  CVE-2009-0316

  Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users…

  vim Debian
  Jan 28, 2009
• Unscored —
  CVE-2008-4677

  autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions,…

  vim Debian
  Oct 22, 2008
• Unscored —
  CVE-2008-4101 Public exploit

  Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exe…

  vim Debian
  Sep 18, 2008
• Unscored —
  CVE-2008-2712 Public exploit EPSS 15%

  Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim script…

  vim Debian
  Jun 16, 2008
• Unscored —
  CVE-2007-2953

  Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, al…

  vim Debian
  Jul 31, 2007
• Unscored —
  CVE-2007-2438

  The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow u…

  vim Debian
  May 2, 2007
• Unscored —
  CVE-2005-2368

  vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands v…

  vim Debian
  Jul 26, 2005
• Unscored —
  CVE-2005-0069

  The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a sy…

  vim Debian
  Jan 29, 2005
• Unscored —
  CVE-2004-1138

  VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted mode…

  vim Debian
  Dec 22, 2004
• Unscored —
  CVE-2002-1377

  vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature …

  vim Debian
  Sep 1, 2004