Vim: Arbitrary Code Execution via Netrw Menu Construction

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Vim is an open source, command line text editor

Vim is an open source, command line text editor

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking…

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by…

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c

Vim: Out-of-bounds Read in Terminal Screen Snapshot

Vim modeline bypass via various options affects Vim < 9.2.0276

Heap-based Buffer Overflow in vim/vim

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim: Arbitrary Code Execution via Shell Keyword Lookup

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

Vim: Arbitrary Code Execution via PHP Omni-Completion

Vim: Arbitrary Code Execution via C Omni-Completion

Vim: Out-of-bounds Write in Spell File Word Count

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim Ex command injection in Vims NetBeans integration

Vim has a heap-buffer-overflow and a segmentation fault

Vim has OS Command Injection in netrw

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

A vulnerability classified as problematic was found in vim up to 9.1.1096

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback…

Use After Free in GitHub repository vim/vim prior to v9.0.2010

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873

Use After Free in GitHub repository vim/vim prior to 9.0.1858

Use After Free in GitHub repository vim/vim prior to 9.0.1857

Use After Free in GitHub repository vim/vim prior to 9.0.1840

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532

Divide By Zero in GitHub repository vim/vim prior to 9.0.1367

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225

A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or…

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143

Use After Free in GitHub repository vim/vim prior to 9.0.0882