CVE-2019-20807 (vim)

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

View Full Alert

Related Posts

  • CVE-2019-13285

    CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection. View Full Alert

  • CVE-2019-17230

    includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. View Full Alert

  • CVE-2019-17231

    includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. View Full Alert