Поиск уязвимостей
Количество 16
Количество 16
BDU:2026-14514
Уязвимость механизма автодополнения PHP-кода Python omni-completion модуля python3complete.vim текстового редактора Vim, позволяющая нарушителю выполнить произвольный код
CVE-2026-57456
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.
CVE-2026-57456
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.
CVE-2026-57456
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.
CVE-2026-57456
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
CVE-2026-57456
Vim is an open source, command line text editor. Prior to 9.2.0699, Vi ...
ALT-PU-2026-13970
ALT-PU-2026-13970: package `vim` update to version 9.2.0752-alt1
ALT-PU-2026-10310
ALT-PU-2026-10310: package `vim` update to version 9.2.0752-alt1
ROS-20260819-80-0033
Уязвимость vim
ROS-20260819-73-0033
Уязвимость vim
RLSA-2026:48703
Important: vim security update
ELSA-2026-48703
ELSA-2026-48703: vim security update (IMPORTANT)
RLSA-2026:48650
Important: vim security update
RLSA-2026:47982
Important: vim security update
ELSA-2026-48650
ELSA-2026-48650: vim security update (IMPORTANT)
ELSA-2026-47982
ELSA-2026-47982: vim security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-14514 Уязвимость механизма автодополнения PHP-кода Python omni-completion модуля python3complete.vim текстового редактора Vim, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-57456 Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-57456 Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-57456 Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699. | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-57456 Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-57456 Vim is an open source, command line text editor. Prior to 9.2.0699, Vi ... | CVSS3: 7.8 | 0% Низкий | 5 месяцев назад |
| ALT-PU-2026-13970 ALT-PU-2026-13970: package `vim` update to version 9.2.0752-alt1 | CVSS3: 8.8 | 2 месяца назад | |
| ALT-PU-2026-10310 ALT-PU-2026-10310: package `vim` update to version 9.2.0752-alt1 | CVSS3: 8.8 | 4 месяца назад | |
 | ROS-20260819-80-0033 Уязвимость vim | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| ROS-20260819-73-0033 Уязвимость vim | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | RLSA-2026:48703 Important: vim security update | 3 месяца назад | ||
| ELSA-2026-48703 ELSA-2026-48703: vim security update (IMPORTANT) | 3 месяца назад | ||
| RLSA-2026:48650 Important: vim security update | 3 месяца назад | ||
| RLSA-2026:47982 Important: vim security update | 3 месяца назад | ||
| ELSA-2026-48650 ELSA-2026-48650: vim security update (IMPORTANT) | 3 месяца назад | ||
| ELSA-2026-47982 ELSA-2026-47982: vim security update (IMPORTANT) | 3 месяца назад |
Уязвимостей на страницу