Поиск уязвимостей
Количество 20
Количество 20
CVE-2026-46483
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
CVE-2026-46483
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
CVE-2026-46483
Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.
CVE-2026-46483
Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
CVE-2026-46483
Vim is an open source, command line text editor. Prior to 9.2.0479, a ...
ROS-20260629-80-0006
Уязвимость vim
BDU:2026-09987
Уязвимость текстового редактора vim, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольные команды
ROS-20260629-73-0016
Уязвимость vim
RLSA-2026:38511
Important: vim security update
RLSA-2026:38510
Important: vim security update
RLSA-2026:38509
Important: vim security update
ELSA-2026-38511
ELSA-2026-38511: vim security update (IMPORTANT)
ELSA-2026-38510
ELSA-2026-38510: vim security update (IMPORTANT)
ELSA-2026-38509
ELSA-2026-38509: vim security update (IMPORTANT)
SUSE-SU-2026:2236-1
Security update for vim
SUSE-SU-2026:2233-1
Security update for vim
openSUSE-SU-2026:20828-1
Security update for vim
SUSE-SU-2026:2313-1
Security update for vim
ALT-PU-2026-8387
ALT-PU-2026-8387: package `vim` update to version 9.2.0537-alt1
ALT-PU-2026-8499
ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-46483 Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479. | CVSS3: 7 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-46483 Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479. | CVSS3: 7 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-46483 Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479. | CVSS3: 7 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-46483 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag | CVSS3: 3.6 | 1% Низкий | 6 месяцев назад |
| CVE-2026-46483 Vim is an open source, command line text editor. Prior to 9.2.0479, a ... | CVSS3: 7 | 1% Низкий | 6 месяцев назад |
 | ROS-20260629-80-0006 Уязвимость vim | CVSS3: 7 | 1% Низкий | 4 месяца назад |
 | BDU:2026-09987 Уязвимость текстового редактора vim, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольные команды | CVSS3: 7 | 1% Низкий | 6 месяцев назад |
| ROS-20260629-73-0016 Уязвимость vim | CVSS3: 7 | 1% Низкий | 4 месяца назад |
 | RLSA-2026:38511 Important: vim security update | 3 месяца назад | ||
| RLSA-2026:38510 Important: vim security update | 3 месяца назад | ||
| RLSA-2026:38509 Important: vim security update | 3 месяца назад | ||
| ELSA-2026-38511 ELSA-2026-38511: vim security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-38510 ELSA-2026-38510: vim security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-38509 ELSA-2026-38509: vim security update (IMPORTANT) | 4 месяца назад | ||
 | SUSE-SU-2026:2236-1 Security update for vim | 5 месяцев назад | ||
| SUSE-SU-2026:2233-1 Security update for vim | 5 месяцев назад | ||
| openSUSE-SU-2026:20828-1 Security update for vim | 5 месяцев назад | ||
| SUSE-SU-2026:2313-1 Security update for vim | 5 месяцев назад | ||
| ALT-PU-2026-8387 ALT-PU-2026-8387: package `vim` update to version 9.2.0537-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-8499 ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1 | CVSS3: 8.8 | 5 месяцев назад |
Уязвимостей на страницу