https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:59:09.179052+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-101 certa-2009-avi-101 — Plusieurs vulnérabilités de vim permettent à un individu malintentionné d'exécuter du code arbitraire à distance. 2026-10-03T08:59:09.182997+00:00 certa-2009-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-128196 EUVD-2026-128196 2026-10-03T08:59:09.183031+00:00 EUVD-2026-128196 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3074 fkie_cve-2008-3074 2026-10-03T08:59:09.183046+00:00

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

 https://cve.radiocsirt.org/vuln/ghsa-rj5h-39v8-hch3 GHSA-rj5h-39v8-hch3 2026-10-03T08:59:09.183078+00:00

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

 https://cve.radiocsirt.org/vuln/gsd-2008-3074 gsd-2008-3074 2026-10-03T08:59:09.183099+00:00 gsd-2008-3074 https://cve.radiocsirt.org/vuln/rhsa-2008:0580 RHSA-2008:0580 — Red Hat Security Advisory: vim security update 2026-10-03T08:59:09.183110+00:00

vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution