https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:42:50.088935+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-101 certa-2009-avi-101 — Plusieurs vulnérabilités de vim permettent à un individu malintentionné d'exécuter du code arbitraire à distance. 2026-10-03T05:42:50.093053+00:00 certa-2009-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-131054 EUVD-2026-131054 2026-10-03T05:42:50.093087+00:00 EUVD-2026-131054 https://cve.radiocsirt.org/vuln/fkie_cve-2008-6235 fkie_cve-2008-6235 2026-10-03T05:42:50.093101+00:00

The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.

 https://cve.radiocsirt.org/vuln/ghsa-f7gm-2q6r-xxwv GHSA-f7gm-2q6r-xxwv 2026-10-03T05:42:50.093129+00:00

The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.

 https://cve.radiocsirt.org/vuln/gsd-2008-6235 gsd-2008-6235 2026-10-03T05:42:50.093145+00:00 gsd-2008-6235 https://cve.radiocsirt.org/vuln/rhsa-2008:0580 RHSA-2008:0580 — Red Hat Security Advisory: vim security update 2026-10-03T05:42:50.093156+00:00

vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution