Поиск уязвимостей
Количество 36
Количество 36
CVE-2026-47167
Vim is an open source, command line text editor. Prior to version 9.2. ...
CVE-2026-47162
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.
CVE-2026-47162
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.
CVE-2026-47162
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.
CVE-2026-47162
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
CVE-2026-47162
Vim is an open source, command line text editor. Prior to version 9.2. ...
SUSE-SU-2026:2236-1
Security update for vim
SUSE-SU-2026:2233-1
Security update for vim
openSUSE-SU-2026:20828-1
Security update for vim
SUSE-SU-2026:2313-1
Security update for vim
ROS-20260716-80-0041
Уязвимость vim
ROS-20260716-80-0040
Уязвимость vim
BDU:2026-10822
Уязвимость функции s:stepmatch() текстового редактора vim, позволяющая нарушителю выполнить произвольный код
BDU:2026-10802
Уязвимость функции s:NetrwBookHistSave() текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20260716-73-0044
Уязвимость vim
ROS-20260716-73-0041
Уязвимость vim
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-47167 Vim is an open source, command line text editor. Prior to version 9.2. ... | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-47162 Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495. | CVSS3: 8.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-47162 Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495. | CVSS3: 7.3 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-47162 Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495. | CVSS3: 8.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name | 0% Низкий | 5 месяцев назад | |
| CVE-2026-47162 Vim is an open source, command line text editor. Prior to version 9.2. ... | CVSS3: 8.8 | 0% Низкий | 5 месяцев назад |
 | SUSE-SU-2026:2236-1 Security update for vim | 5 месяцев назад | ||
| SUSE-SU-2026:2233-1 Security update for vim | 5 месяцев назад | ||
| openSUSE-SU-2026:20828-1 Security update for vim | 6 месяцев назад | ||
| SUSE-SU-2026:2313-1 Security update for vim | 5 месяцев назад | ||
 | ROS-20260716-80-0041 Уязвимость vim | CVSS3: 8 | 0% Низкий | 4 месяца назад |
| ROS-20260716-80-0040 Уязвимость vim | CVSS3: 6.3 | 0% Низкий | 4 месяца назад |
 | BDU:2026-10822 Уязвимость функции s:stepmatch() текстового редактора vim, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.3 | 0% Низкий | 5 месяцев назад |
| BDU:2026-10802 Уязвимость функции s:NetrwBookHistSave() текстового редактора vim, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 8 | 0% Низкий | 5 месяцев назад |
| ROS-20260716-73-0044 Уязвимость vim | CVSS3: 8 | 0% Низкий | 4 месяца назад |
| ROS-20260716-73-0041 Уязвимость vim | CVSS3: 6.3 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу