https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:42:39 +0000 https://cve.radiocsirt.org/vuln/certa-2009-avi-101 certa-2009-avi-101 https://cve.radiocsirt.org/vuln/certa-2009-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-131054 EUVD-2026-131054 https://cve.radiocsirt.org/vuln/euvd-2026-131054 https://cve.radiocsirt.org/vuln/fkie_cve-2008-6235 <p>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) &#34;D&#34; (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</p> <p>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) &#34;D&#34; (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-6235 https://cve.radiocsirt.org/vuln/ghsa-f7gm-2q6r-xxwv <p>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) &#34;D&#34; (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</p> <p>The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) &#34;D&#34; (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.</p> https://cve.radiocsirt.org/vuln/ghsa-f7gm-2q6r-xxwv https://cve.radiocsirt.org/vuln/gsd-2008-6235 gsd-2008-6235 https://cve.radiocsirt.org/vuln/gsd-2008-6235 https://cve.radiocsirt.org/vuln/rhsa-2008:0580 <p>vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution</p> <p>vim format string flaw vim: command execution via scripts not sanitizing inputs to execute and system plugin: improper Implementation of shellescape() (arbitrary code execution) plugin: improper Implementation of shellescape() (arbitrary code execution) vim: arbitrary code execution in commands: K, Control-], g] plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2008:0580