Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vim netrw 122 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-4677
autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions prior to 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts,...
Vim Netrw 109Vim Netrw 131Vim Netrw 116Vim Netrw 118Vim Netrw 112Vim Netrw 113Vim Netrw 122Vim Netrw 123Vim Netrw 114Vim Netrw 115Vim Netrw 128Vim Netrw 110Vim Netrw 111Vim Netrw 120Vim Netrw 121
NA
CVE-2008-3076
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted malicious users to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test ...
Vim Vim 7.2a.10
NA
CVE-2008-4101
Vim 3.0 up to and including 7.x prior to 7.2.010 does not properly escape characters, which allows user-assisted malicious users to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute...
Vim Vim 5.2Vim Vim 5.3Vim Vim 6.1Vim Vim 6.2Vim Vim 5.4Vim Vim 5.5Vim Vim 6.3Vim Vim 6.4Vim Vim 5.0Vim Vim 5.1Vim Vim 5.8Vim Vim 6.0Vim VimVim Vim 3.0Vim Vim 4.0Vim Vim 5.6Vim Vim 5.7Vim Vim 7.0Vim Vim 7.1
NA
CVE-2008-3075
The shellescape function in Vim 7.0 up to and including 7.2, including 7.2a.10, allows user-assisted malicious users to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the f...
Vim Vim 7.1.266Vim Vim 7.1Vim Vim 7.2Vim Vim 7.1.314Vim Zipplugin.vim V.19Vim Zipplugin.vim V.18Vim Vim 7.0Vim Vim 7.2a.10Vim Zipplugin.vim V.15Vim Zipplugin.vim V.14Vim Zipplugin.vim V.13Vim Zipplugin.vim V.17Vim Zipplugin.vim V.16Vim Zipplugin.vim V.21Vim Zipplugin.vim V.20Vim Zipplugin.vim V.12Vim Zipplugin.vim V.11
NA
CVE-2008-3074
The shellescape function in Vim 7.0 up to and including 7.2, including 7.2a.10, allows user-assisted malicious users to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the f...
Vim Vim 7.2Vim Tar.vim V.12Vim Tar.vim V.13Vim Tar.vim V.20Vim Tar.vim V.21Vim Vim 7.1Vim Vim 7.0Vim Tar.vim V.16Vim Tar.vim V.17Vim Vim 7.1.314Vim Vim 7.1.266Vim Tar.vim V.14Vim Tar.vim V.15Vim Tar.vim V.22Vim Tar.vim V.10Vim Tar.vim V.11Vim Tar.vim V.18Vim Tar.vim V.19
NA
CVE-2008-2712
Vim 7.1.314, 6.4, and other versions allows user-assisted remote malicious users to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, ...
Vim VimCanonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 6.06
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook