Overview 292 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 10 public PoC · 0 EPSS ≥ 0.5
292matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
10public PoC3.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.3%
Not applicable
291
99.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
292
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
10
3.4%
Proof of concept only
48
16.4%
Forecast only
0
0.0%
No public exploit
234
80.1%
split by
peak 115 / year
20012
Not applicable2
Medium1
Low1
not blocked2
Working exploit published1
No public exploit1
20021
Not applicable1
Medium1
not blocked1
No public exploit1
20030
20040
20053
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20060
20074
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20086
Not applicable6
High4
Medium1
Low1
not blocked6
Working exploit published5
No public exploit1
20095
Not applicable5
High4
Medium1
not blocked5
Working exploit published1
No public exploit4
20101
Not applicable1
High1
not blocked1
No public exploit1
20110
20120
20130
20142
Not applicable2
High2
not blocked2
No public exploit2
20150
20163
Not applicable3
High3
not blocked3
No public exploit3
20179
Not applicable9
Critical3
High2
Medium4
not blocked9
Working exploit published1
No public exploit8
20180
20193
Not applicable3
High2
Medium1
not blocked3
Working exploit published1
No public exploit2
20202
Not applicable2
High1
Medium1
not blocked2
No public exploit2
202121
Not applicable21
High19
Medium2
not blocked21
No public exploit21
2022115
Outside Waratek scope1
Not applicable114
Critical2
High94
Medium18
Low1
not blocked115
Proof of concept only12
No public exploit103
202345
Not applicable45
Critical1
High24
Medium20
not blocked45
Proof of concept only30
No public exploit15
202410
Not applicable10
High3
Medium7
not blocked10
Proof of concept only1
No public exploit9
202513
Not applicable13
High2
Medium8
Low3
not blocked13
Proof of concept only5
No public exploit8
202647
Not applicable47
Critical1
High23
Medium21
Low2
not blocked47
No public exploit47
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-2426 | Medium | 2023-04-29 | Not applicable | Proof of concept only | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. |
| CVE-2023-1355 | Medium | 2023-03-11 | Not applicable | Proof of concept only | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. |
| CVE-2023-1264 | Medium | 2023-03-07 | Not applicable | Proof of concept only | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. |
| CVE-2023-1175 | Medium | 2023-03-04 | Not applicable | Proof of concept only | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. |
| CVE-2023-1170 | Medium | 2023-03-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. |
| CVE-2023-1127 | High | 2023-03-01 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. |
| CVE-2023-0153 | Medium | 2023-02-06 | Not applicable | Proof of concept only | The Vimeo Video Autoplay Automute WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. |
| CVE-2021-37518 | Medium | 2023-02-03 | Not applicable | Proof of concept only | Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature. |
| CVE-2023-0512 | High | 2023-01-30 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. |
| CVE-2023-0433 | High | 2023-01-21 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
| CVE-2022-47024 | High | 2023-01-20 | Not applicable | No public exploit | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. |
| CVE-2023-0288 | High | 2023-01-13 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. |
| CVE-2023-0054 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
| CVE-2023-0051 | High | 2023-01-04 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. |
| CVE-2023-0049 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. |
| CVE-2022-4293 | Medium | 2022-12-05 | Not applicable | Proof of concept only | Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. |
| CVE-2022-4292 | High | 2022-12-05 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0882. |
| CVE-2022-3491 | High | 2022-12-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. |
| CVE-2022-3591 | High | 2022-12-02 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
| CVE-2022-3520 | Critical | 2022-12-02 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. |
| CVE-2022-4141 | High | 2022-11-25 | Not applicable | Proof of concept only | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. |
| CVE-2022-3705 | High | 2022-10-26 | Outside Waratek scope | No public exploit | A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324. |
| CVE-2022-3352 | High | 2022-09-29 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0614. |
| CVE-2022-1725 | Medium | 2022-09-29 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. |
| CVE-2022-3324 | High | 2022-09-27 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. |
| CVE-2022-3297 | High | 2022-09-25 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0579. |
| CVE-2022-3296 | High | 2022-09-25 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. |
| CVE-2022-3278 | Medium | 2022-09-23 | Not applicable | Proof of concept only | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. |
| CVE-2022-3256 | High | 2022-09-22 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0530. |
| CVE-2022-3235 | High | 2022-09-18 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0490. |
| CVE-2022-3234 | High | 2022-09-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. |
| CVE-2022-3153 | Medium | 2022-09-08 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. |
| CVE-2022-3134 | High | 2022-09-06 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
| CVE-2022-3099 | High | 2022-09-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
| CVE-2022-37173 | High | 2022-08-30 | Not applicable | No public exploit | An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe. |
| CVE-2022-3037 | High | 2022-08-30 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
| CVE-2022-3016 | High | 2022-08-28 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0286. |
| CVE-2022-2982 | High | 2022-08-25 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0260. |
| CVE-2022-2980 | Medium | 2022-08-25 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. |
| CVE-2022-2946 | High | 2022-08-23 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0246. |
| CVE-2022-2923 | Medium | 2022-08-22 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. |
| CVE-2022-2889 | High | 2022-08-19 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0225. |
| CVE-2022-2874 | Medium | 2022-08-18 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224. |
| CVE-2022-2862 | High | 2022-08-17 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0221. |
| CVE-2022-2849 | High | 2022-08-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. |
| CVE-2022-2845 | High | 2022-08-17 | Not applicable | No public exploit | Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. |
| CVE-2022-2819 | High | 2022-08-15 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211. |
| CVE-2022-2817 | High | 2022-08-15 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
| CVE-2022-2816 | High | 2022-08-15 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. |
| CVE-2022-2598 | Medium | 2022-08-01 | Not applicable | No public exploit | Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100. |
| CVE-2022-2581 | High | 2022-08-01 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. |
| CVE-2022-2580 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. |
| CVE-2022-2571 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. |
| CVE-2022-2522 | High | 2022-07-25 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061. |
| CVE-2022-2345 | High | 2022-07-08 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0046. |
| CVE-2022-2344 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
| CVE-2022-2343 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. |
| CVE-2022-2304 | High | 2022-07-05 | Not applicable | No public exploit | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2289 | High | 2022-07-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2288 | High | 2022-07-03 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2287 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2286 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2285 | High | 2022-07-02 | Not applicable | No public exploit | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2284 | High | 2022-07-02 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2264 | High | 2022-07-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2257 | High | 2022-06-30 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2231 | Medium | 2022-06-28 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2210 | High | 2022-06-27 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2208 | Medium | 2022-06-27 | Not applicable | No public exploit | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. |
| CVE-2022-2207 | High | 2022-06-27 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2206 | High | 2022-06-26 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2183 | High | 2022-06-23 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2182 | High | 2022-06-23 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2175 | High | 2022-06-23 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1720 | High | 2022-06-20 | Not applicable | No public exploit | Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution. |
| CVE-2022-2129 | High | 2022-06-19 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2126 | High | 2022-06-19 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2125 | High | 2022-06-19 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2124 | High | 2022-06-19 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2042 | High | 2022-06-10 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2000 | High | 2022-06-09 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1968 | High | 2022-06-02 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1942 | High | 2022-05-31 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1927 | High | 2022-05-29 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1898 | High | 2022-05-27 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1897 | High | 2022-05-27 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1886 | High | 2022-05-26 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1851 | High | 2022-05-25 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1796 | High | 2022-05-19 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 8.2.4979. |
| CVE-2022-1785 | High | 2022-05-19 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977. |
| CVE-2022-1771 | Medium | 2022-05-18 | Not applicable | No public exploit | Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975. |
| CVE-2022-1769 | High | 2022-05-17 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974. |
| CVE-2022-1735 | High | 2022-05-17 | Not applicable | No public exploit | Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969. |
| CVE-2022-1733 | High | 2022-05-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968. |
| CVE-2022-1674 | Medium | 2022-05-12 | Not applicable | No public exploit | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input. |
| CVE-2022-1629 | High | 2022-05-10 | Not applicable | No public exploit | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution |
| CVE-2022-1621 | High | 2022-05-10 | Not applicable | No public exploit | Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |
| CVE-2022-1620 | High | 2022-05-08 | Not applicable | No public exploit | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input. |
| CVE-2022-1619 | High | 2022-05-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution |
| CVE-2022-1616 | High | 2022-05-07 | Not applicable | No public exploit | Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution |