vim

Every one of the 100 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Improper Input Validation in VimCVE-2025-27423vim · CVSS 7.1 · 22% likely

   CWE-77

2. getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execut…CVE-2019-12735Vim · 19% likely

   CWE-78

3. Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the e…CVE-2008-2712Vim · 15% likely

   CWE-20

4. Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a…CVE-2008-4101Vim · 9.2% likely

   CWE-20

5. The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system func…CVE-2008-3076Vim · 9.0% likely

   CWE-78

6. Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters i…CVE-2008-3432Vim · 8.6% likely

   CWE-119

7. src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permission…CVE-2008-3294Vim · 4.5% likely

   CWE-94

8. The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in…CVE-2008-3075Vim · 4.3% likely

   CWE-94

9. An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a…CVE-2017-6350Vim · 3.2% likely

   CWE-190

10. The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) co…CVE-2008-6235Vim · 3.0% likely

    CWE-78

11. vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a r…CVE-2017-5953Vim · 2.8% likely

    CWE-190

12. Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in…CVE-2009-0316Vim · 2.7% likely
13. An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corru…CVE-2017-6349Vim · 2.7% likely

    CWE-190

14. The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.CVE-2019-20079Vim · 1.9% likely

    CWE-416

15. vim autocmd quickfix.c qf_update_buffer use after freeCVE-2022-3705Vim · CVSS 5 · 1.7% likely

    CWE-416

16. Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter.CVE-2020-20703Vim · CVSS 9.8 · 1.5% likely

    CWE-120

17. Vim has OS Command Injection in netrwCVE-2026-28417vim · CVSS 4.4 · 1.4% likely

    CWE-86

18. VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration.CVE-2021-28832Vim Project · 1.2% likely
19. Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited n…CVE-2017-11109Vim · 1.1% likely

    CWE-416

20. Vim: OS Command Injection via 'path' completionCVE-2026-44656vim · CVSS 4.6 · 0.9% likely

    CWE-78

21. Vim affected by Command injection via newline in glob()CVE-2026-33412vim · CVSS 5.6 · 0.9% likely

    CWE-78

22. Vim has path traversal issue with zip.vim and special crafted zip archivesCVE-2025-53906vim · CVSS 4.1 · 0.9% likely

    CWE-22

23. Vim: OS Command Injection in netrwCVE-2026-42307vim · CVSS 4.4 · 0.8% likely

    CWE-78

24. overflow in shift_line in vimCVE-2023-48237vim · CVSS 2.8 · 0.8% likely

    CWE-190

25. overflow in ex address parsing in vimCVE-2023-48235vim · CVSS 2.8 · 0.8% likely

    CWE-190

26. overflow in nv_z_get_count in vimCVE-2023-48234vim · CVSS 2.8 · 0.8% likely

    CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.