Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
354 results · page 4 of 8
Feb 3, 2023Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.CVE-2021-37518 · Other software · Vimium Project · reported by MITREMedium 6.1
Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
- Product
- Vimium
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 30, 2023Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.CVE-2023-0512 · Other software · vim · reported by security@huntr.devHigh 7.8
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Jan 21, 2023Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.CVE-2023-0433 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Jan 20, 2023A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause deniCVE-2022-47024 · Other software · VIM · reported by MITREHigh 7.8
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- Product
- VIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.fedoraproject.org
Jan 13, 2023Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.CVE-2023-0288 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orggithub.com
Jan 4, 2023Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.CVE-2023-0054 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orggithub.com
Jan 4, 2023Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.CVE-2023-0051 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orggithub.com
Jan 4, 2023Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.CVE-2023-0049 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orggithub.com
Dec 5, 2022Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.CVE-2022-4293 · Other software · vim · reported by security@huntr.devMedium 5.5
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 5, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0882.CVE-2022-4292 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0882.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.CVE-2022-3491 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.CVE-2022-3520 · Other software · vim · reported by security@huntr.devCritical 9.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0789.CVE-2022-3591 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 25, 2022Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.CVE-2022-4141 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 26, 2022A vulnerability was found in vim and classified as problematic.CVE-2022-3705 · Other software · unspecified · reported by VulDBMedium 5
A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324.
- Product
- vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orggithub.com
Sep 29, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0614.CVE-2022-3352 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0614.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 28, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.CVE-2022-1725 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Sep 27, 2022Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.CVE-2022-3324 · Other software · vim · reported by security@huntr.devHigh 7.8
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0579.CVE-2022-3297 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2022Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.CVE-2022-3296 · Other software · vim · reported by security@huntr.devHigh 7.8
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.CVE-2022-3278 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 22, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0530.CVE-2022-3256 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0530.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0490.CVE-2022-3235 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.CVE-2022-3234 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.CVE-2022-3153 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 6, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0389.CVE-2022-3134 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0389.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0360.CVE-2022-3099 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 30, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0322.CVE-2022-3037 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 30, 2022An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe.CVE-2022-37173 · Other software · VIM · reported by MITREHigh 7.8
An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe.
- Product
- Gvim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 28, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0286.CVE-2022-3016 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0260.CVE-2022-2982 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0260.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.CVE-2022-2980 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0246.CVE-2022-2946 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0246.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.CVE-2022-2923 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0225.CVE-2022-2889 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0225.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 18, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.CVE-2022-2874 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0221.CVE-2022-2862 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0221.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.CVE-2022-2849 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2022Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.CVE-2022-2845 · Other software · vim · reported by security@huntr.devHigh 7.8
Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 15, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0213.CVE-2022-2817 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0213.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 15, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.CVE-2022-2816 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 15, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.CVE-2022-2819 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 2022Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.CVE-2022-2598 · Other software · vim · reported by security@huntr.devMedium 6.5
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.CVE-2022-2581 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.CVE-2022-2580 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.CVE-2022-2571 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 25, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.CVE-2022-2522 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 8, 2022Use After Free in GitHub repository vim/vim prior to 9.0.0046.CVE-2022-2345 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.0046.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 8, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.CVE-2022-2344 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 8, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.CVE-2022-2343 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
- Product
- vim/vim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.