vim vulnerabilities (Ubuntu)
217 vulnerabilities.
-
vimUbuntu Vim: Arbitrary Ex Command Execution in C Omni-Completion 7.1 High -
vimUbuntu Vim: Arbitrary Code Execution via Netrw Menu Construction 8.6 High -
vimUbuntu Vim: Arbitrary Code Execution via Shell Keyword Lookup 8.4 High -
vimUbuntu Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` 8.4 High -
vimUbuntu Vim: Heap Buffer Overflow in Text Property Handling 7.1 High -
vimUbuntu Vim: Heap Buffer Overflow when Loading a Spell File 8.5 High -
vimUbuntu Vim: Use-after-free in JSON Decoding 3.3 Low -
vimUbuntu Vim: Arbitrary Code Execution via C Omni-Completion 8.4 High -
vimUbuntu Vim: Out-of-bounds Write in SAL Soundfolding 5.6 Medium -
vimUbuntu Vim: Arbitrary Code Execution via PHP Omni-Completion 8.4 High -
vimUbuntu Vim: Out-of-bounds Write in Spell File Word Count 5.7 Medium -
vimUbuntu Vim: Out-of-bounds Read with libsodium-encrypted Files 5.5 Medium -
vimUbuntu Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction 6.5 Medium -
vimUbuntu Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument 4.0 Medium -
vimUbuntu Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings 8.4 High -
vimUbuntu Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename 5.7 Medium -
vimUbuntu Vim: Out-of-bounds Write in Spell File Prefix Dump 5.5 Medium -
vimUbuntu Vim: Arbitrary Code Execution via Python Omni-Completion 7.5 High -
vimUbuntu Vim: Out-of-bounds Read in Terminal Screen Snapshot 6.9 Medium -
vimUbuntu Vim: Arbitrary Code Execution via Python Omni-Completion 7.3 High -
vimUbuntu Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name 7.3 High -
vimUbuntu Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex 5.1 Medium -
vimUbuntu Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution 7.8 High -
vimUbuntu Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag 3.6 Low -
vimUbuntu Vim: Heap Buffer Overflow in spell file loading 6.6 Medium -
vimUbuntu Vim: OS Command Injection via 'path' completion 4.6 Medium -
vimUbuntu Vim: OS Command Injection in netrw 4.4 Medium -
vimUbuntu Vim: Command injection via backtick expansion in tag filenames 6.6 Medium -
vimUbuntu Vim Ex command injection in Vims NetBeans integration 5.0 Medium -
vimUbuntu Path traversal issue with zip.vim in Vim 4.1 Medium -
vimUbuntu Vim modeline bypass via various options affects Vim < 9.2.0276 8.2 High -
vimUbuntu Vim affected by Command injection via newline in glob() 5.6 Medium -
vimUbuntu NFA regex engine NULL pointer dereference affects Vim < 9.2.0137 5.3 Medium -
vimUbuntu Vim has stack-buffer-overflow in build_stl_str_hl() 2.2 Low -
vimUbuntu Vim has a heap-buffer-overflow and a segmentation fault 5.3 Medium -
vimUbuntu Vim has Heap-based Buffer Overflow and OOB Read in :terminal 4.4 Medium -
vimUbuntu Vim has Heap-based Buffer Underflow in Emacs tags parsing 5.3 Medium -
vimUbuntu Vim has Heap-based Buffer Overflow in Emacs tags parsing 4.4 Medium -
vimUbuntu Vim has OS Command Injection in netrw 4.4 Medium -
vimUbuntu Vim has a Netbeans specialKeys Stack Buffer Overflow 5.4 Medium -
vimUbuntu Heap Overflow in Vim 6.6 Medium -
vimUbuntu Vim has path traversal issue with zip.vim and special crafted zip archives 4.1 Medium -
vimUbuntu Vim has path traversial issue with tar.vim and special crafted tar files 4.1 Medium -
vimUbuntu heap-use-after-free in function str_to_reg in vim/vim 4.2 Medium -
vimUbuntu vim main.c memory corruption 2.4 Low -
vimUbuntu segmentation fault in win_line() in Vim < 9.1.1043 4.2 Medium -
vimUbuntu heap-buffer-overflow with visual mode in Vim < 9.1.1003 4.2 Medium -
vimUbuntu use-after-free when closing buffers in Vim 3.9 Low -
vimUbuntu heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697 4.5 Medium -
vimUbuntu Vim heap-use-after-free in src/arglist.c:207 4.5 Medium - Show olderLoading…