https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:41:06 +0000 https://cve.radiocsirt.org/vuln/certa-2008-avi-492 certa-2008-avi-492 https://cve.radiocsirt.org/vuln/certa-2008-avi-492 https://cve.radiocsirt.org/vuln/euvd-2026-129165 EUVD-2026-129165 https://cve.radiocsirt.org/vuln/euvd-2026-129165 https://cve.radiocsirt.org/vuln/fkie_cve-2008-4101 <p>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a &#34;;&#34; (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) &#34;Ctrl-]&#34; (control close-square-bracket) or (3) &#34;g]&#34; (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</p> <p>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a &#34;;&#34; (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) &#34;Ctrl-]&#34; (control close-square-bracket) or (3) &#34;g]&#34; (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-4101 https://cve.radiocsirt.org/vuln/ghsa-2gqj-jjm7-f6m7 <p>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a &#34;;&#34; (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) &#34;Ctrl-]&#34; (control close-square-bracket) or (3) &#34;g]&#34; (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</p> <p>Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a &#34;;&#34; (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) &#34;Ctrl-]&#34; (control close-square-bracket) or (3) &#34;g]&#34; (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.</p> https://cve.radiocsirt.org/vuln/ghsa-2gqj-jjm7-f6m7 https://cve.radiocsirt.org/vuln/gsd-2008-4101 gsd-2008-4101 https://cve.radiocsirt.org/vuln/gsd-2008-4101 https://cve.radiocsirt.org/vuln/rhsa-2008:0580 <p>vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution</p> <p>vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0580