WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product vim✕
Overview 7 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
7matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 7 100.0% Withdrawn CVE 0 0.0%
Critical 7 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 1 14.3% Forecast only 0 0.0% No public exploit 6 85.7%
split by peak 3 / year
Not applicable: 7 Critical: 7 not blocked: 7 No public exploit: 6Proof of concept only: 1
20173 Not applicable3 Critical3 not blocked3 No public exploit3 20180 20190 20200 20210 20222 Not applicable2 Critical2 not blocked2 Proof of concept only1 No public exploit1 20231 Not applicable1 Critical1 not blocked1 No public exploit1 20240 20250 20261 Not applicable1 Critical1 not blocked1 No public exploit1
2017201820192020202120222023202420252026
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-34714 Critical 2026-03-30 Not applicable No public exploit Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
CVE-2020-20703 Critical 2023-06-20 Not applicable No public exploit Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.
CVE-2022-3520 Critical 2022-12-02 Not applicable Proof of concept only Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
CVE-2022-0318 Critical 2022-01-21 Not applicable No public exploit Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2017-6350 Critical 2017-02-27 Not applicable No public exploit An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-6349 Critical 2017-02-27 Not applicable No public exploit An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-5953 Critical 2017-02-10 Not applicable No public exploit vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.