Поиск уязвимостей
Количество 20
Количество 20
BDU:2026-02589
Уязвимость текстового редактора vim, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольные команды
ROS-20260524-80-0028
Уязвимость vim
CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.
CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.
CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.
CVE-2026-28417
Vim has OS Command Injection in netrw
CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2. ...
ALT-PU-2026-8017
ALT-PU-2026-8017: package `vim` update to version 9.2.0478-alt2
ALT-PU-2026-8499
ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1
openSUSE-SU-2026:20403-1
Security update for vim
RLSA-2026:8259
Important: vim security update
RLSA-2026:7711
Important: vim security update
RLSA-2026:6915
Important: vim security update
ELSA-2026-8259
ELSA-2026-8259: vim security update (IMPORTANT)
ELSA-2026-7711
ELSA-2026-7711: vim security update (IMPORTANT)
ELSA-2026-6915
ELSA-2026-6915: vim security update (IMPORTANT)
ELSA-2026-6617
ELSA-2026-6617: vim security update (IMPORTANT)
SUSE-SU-2026:1095-1
Security update for vim
SUSE-SU-2026:1051-1
Security update for vim
SUSE-SU-2026:0910-1
Security update for vim
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-02589 Уязвимость текстового редактора vim, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольные команды | CVSS3: 7.8 | 1% Низкий | 9 месяцев назад |
 | ROS-20260524-80-0028 Уязвимость vim | CVSS3: 7.8 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue. | CVSS3: 7.8 | 1% Низкий | 9 месяцев назад |
 | CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue. | CVSS3: 4.4 | 1% Низкий | 9 месяцев назад |
 | CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue. | CVSS3: 7.8 | 1% Низкий | 9 месяцев назад |
 | CVE-2026-28417 Vim has OS Command Injection in netrw | CVSS3: 4.4 | 1% Низкий | 9 месяцев назад |
| CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2. ... | CVSS3: 7.8 | 1% Низкий | 9 месяцев назад |
| ALT-PU-2026-8017 ALT-PU-2026-8017: package `vim` update to version 9.2.0478-alt2 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-8499 ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
 | openSUSE-SU-2026:20403-1 Security update for vim | 8 месяцев назад | ||
 | RLSA-2026:8259 Important: vim security update | 7 месяцев назад | ||
| RLSA-2026:7711 Important: vim security update | 7 месяцев назад | ||
| RLSA-2026:6915 Important: vim security update | 7 месяцев назад | ||
| ELSA-2026-8259 ELSA-2026-8259: vim security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-7711 ELSA-2026-7711: vim security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-6915 ELSA-2026-6915: vim security update (IMPORTANT) | 7 месяцев назад | ||
| ELSA-2026-6617 ELSA-2026-6617: vim security update (IMPORTANT) | 6 месяцев назад | ||
| SUSE-SU-2026:1095-1 Security update for vim | 7 месяцев назад | ||
| SUSE-SU-2026:1051-1 Security update for vim | 7 месяцев назад | ||
| SUSE-SU-2026:0910-1 Security update for vim | 7 месяцев назад |
Уязвимостей на страницу