CVE Browser

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim: Arbitrary Code Execution via Netrw Menu Construction

Vim: Arbitrary Code Execution via Shell Keyword Lookup

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

Vim: Out-of-bounds Access in Popup Opacity Handling

Vim: Heap Buffer Overflow in Text Property Handling

Vim: Heap Buffer Overflow when Loading a Spell File

Vim: Use-after-free in JSON Decoding

Vim: Stack Buffer Overflow in the Vim Socket Server

vim: Vim: Arbitrary code execution via vms_fixfilename() function

vim: Vim: Arbitrary code execution via vms_fixfilename() function

Vim: Arbitrary Code Execution via PHP Omni-Completion

Vim: Arbitrary Code Execution via C Omni-Completion

Vim: Out-of-bounds Write in SAL Soundfolding

Vim: Out-of-bounds Write in Spell File Word Count

Vim: Out-of-bounds Write in Spell File Prefix Dump

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

Vim: Out-of-bounds Read in Text Property Count

Vim: Out-of-bounds Read with libsodium-encrypted Files

Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

Vim: Out-of-bounds Read with Text Properties

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

Vim: Arbitrary Code Execution via Python Omni-Completion