Known vulnerabilities in vim-small
Vendor:
SUSE
Software:
vim-small
Software CPE:
cpe:2.3:o:suse:vim-small:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
165
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
9.2.0780-150500.20.61.2
9.2.0780-150000.5.99.1
9.2.0530-150000.5.94.1
9.2.0530-slfo.1.1_1.1
9.2.0530-160000.1.1
9.2.0398-150500.20.49.1
9.2.0280-150500.20.46.1
9.2.0280-150000.5.89.1
9.2.0110-150000.5.86.1
9.2.0110-150500.20.43.1
9.1.1629-150000.5.81.1
9.1.1629-150500.20.38.1
9.1.1629-150500.20.33.1
9.1.1629-150000.5.78.1
9.1.1176-150500.20.24.2
9.1.1176-150000.5.72.1
9.1.1101-150000.5.69.1
9.1.1101-150500.20.21.1
9.1.0836-150500.20.18.1
9.1.0836-150500.20.15.1
9.1.0836-150000.5.66.1
9.1.0330-150000.5.63.1
9.1.0330-150500.20.12.1
9.1.0111-150500.20.9.1
9.0.2103-150000.5.57.1
9.0.2103-150500.20.6.1
9.0.1894-150000.5.54.1
9.0.1632-150500.20.3.1
9.0.1572-150000.5.46.1
9.0.1443-150000.5.40.1
8.0.1568-5.17.1
9.0.1386-150000.5.37.1
9.0.1234-150000.5.34.1
9.0.1040-150000.5.31.1
9.0.0814-150000.5.28.1
9.0.0313-150000.5.25.1
8.2.5038-150000.5.21.1
Vulnerabilities (165)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-34714 |
CWE-78 | Low | 9.2.0280-150000.5.89.1, 9.2.0280-150500.20.46.1 | 17.08.2026 |
SB2026081760 SB2026081761 SB2026081762 and 6 more |
||
| #VU135702 - Improper Control of Generation of Code ('Code Injection') CVE-2026-59856 |
CWE-94 | High | 9.2.0780-150000.5.99.1, 9.2.0780-150500.20.61.2 | 29.06.2026 |
SB2026062909 SB20260715103 SB2026072430 and 4 more |
||
| #VU135701 - Improper Control of Generation of Code ('Code Injection') CVE-2026-59858 |
CWE-94 | Medium | 9.2.0780-150000.5.99.1, 9.2.0780-150500.20.61.2 | 29.06.2026 |
SB2026062908 SB20260715103 SB2026072526 and 5 more |
||
| #VU135167 - Out-of-bounds write CVE-2026-59857 |
CWE-787 | Low | 9.2.0780-150000.5.99.1, 9.2.0780-150500.20.61.2 | 25.06.2026 |
SB2026062530 SB20260715103 SB2026072526 and 3 more |
||
| #VU131545 - Improper Control of Generation of Code ('Code Injection') CVE-2026-43961 |
CWE-94 | Medium | 9.2.0530-slfo.1.1_1.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 15.05.2026 |
SB2026051518 SB20260529238 SB2026053001 and 8 more |
||
| #VU131544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-46483 |
CWE-78 | Low | 9.2.0530-slfo.1.1_1.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 15.05.2026 |
SB2026051517 SB2026052130 SB2026052523 and 18 more |
||
| #VU130925 - Heap-based Buffer Overflow CVE-2026-45130 |
CWE-122 | Medium | 9.2.0530-slfo.1.1_1.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 11.05.2026 |
SB2026051150 SB2026052726 SB2026052760 and 10 more |
||
| #VU129539 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-44656 |
CWE-78 | Medium | 9.2.0530-slfo.1.1_1.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 04.05.2026 |
SB2026050476 SB2026052760 SB2026052762 and 9 more |
||
| #VU126891 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-42307 |
CWE-78 | Medium | 9.2.0530-slfo.1.1_1.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 23.04.2026 |
SB2026042335 SB2026052760 SB2026052762 and 9 more |
||
| #VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-39881 |
CWE-78 | Medium | 9.2.0398-150500.20.49.1, 9.2.0530-150000.5.94.1, 9.2.0530-160000.1.1 | 08.04.2026 |
SB2026040828 SB2026041567 SB2026042494 and 9 more |
||
| #VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-34982 |
CWE-78 | High | 9.2.0280-150000.5.89.1, 9.2.0280-150500.20.46.1 | 07.04.2026 |
SB2026040792 SB2026041439 SB20260417153 and 13 more |
||
| #VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-33412 |
CWE-78 | Medium | 9.2.0280-150000.5.89.1, 9.2.0280-150500.20.46.1 | 20.03.2026 |
SB2026032022 SB20260325108 SB20260325109 and 23 more |
||
| #VU123423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-28417 |
CWE-78 | High | 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1 | 03.03.2026 |
SB2026030317 SB2026030620 SB2026030621 and 28 more |
||
| #VU122841 - Stack-based buffer overflow CVE-2026-26269 |
CWE-121 | Medium | 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1 | 16.02.2026 |
SB2026021613 SB2026022443 SB2026022444 and 11 more |
||
| #VU113786 - Double Free CVE-2025-55158 |
CWE-415 | Medium | 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1 | 11.08.2025 |
SB2025081102 SB2025092551 SB2025092557 and 1 more |
||
| #VU113785 - Heap-based Buffer Overflow CVE-2025-55157 |
CWE-122 | Medium | 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1 | 11.08.2025 |
SB2025081101 SB2025092551 SB2025092557 and 1 more |
||
| #VU112980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-53905 |
CWE-22 | High | 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1 | 16.07.2025 |
SB2025071691 SB2025071770 SB2025071771 and 23 more |
||
| #VU112979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-53906 |
CWE-22 | High | 9.1.1629-150000.5.78.1, 9.1.1629-150500.20.33.1, 9.2.0110-150000.5.86.1, 9.2.0110-150500.20.43.1 | 16.07.2025 |
SB2025071690 SB2025071770 SB2025071771 and 29 more |
||
| #VU96494 - Heap-based Buffer Overflow CVE-2024-43802 |
CWE-122 | Low | 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1 | 26.08.2024 |
SB2024082602 SB2024083027 SB2024083028 and 13 more |
||
| #VU96466 - Heap-based Buffer Overflow CVE-2024-43790 |
CWE-122 | Low | 9.1.1101-150000.5.69.1, 9.1.1101-150500.20.21.1 | 22.08.2024 |
SB2024082297 SB20250226510 SB20250226511 and 4 more |
Showing elements 1 - 20 out of 165