An update of the vim package has been released.

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. (CVE-2022-3491)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0789. (CVE-2022-3591)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. (CVE-2023-1170)

  - Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. (CVE-2023-1175)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. (CVE-2023-1264)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1703 advisory.

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. (CVE-2023-0288)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. (CVE-2023-0512)

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. (CVE-2023-1127)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. (CVE-2022-3491)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0789. (CVE-2022-3591)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. (CVE-2023-1170)

  - Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. (CVE-2023-1175)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. (CVE-2023-1264)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. (CVE-2023-1170)

  - Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. (CVE-2023-1175)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. (CVE-2023-1264)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5836-1 advisory.

    It was discovered that Vim was not properly performing memory management operations. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.4. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

  - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. (CVE-2023-0512)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An     app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23514)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access     to protected parts of the file system. (CVE-2023-23527)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4. An app may be able to modify protected parts of the file system. (CVE-2023-23533,     CVE-2023-23538)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4,     watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23536)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur     11.7.5. An app may be able to read sensitive location information. (CVE-2023-23537)

  - The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS     15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to     execute arbitrary code with kernel privileges. (CVE-2023-23540)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-     sensitive data. (CVE-2023-23542)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to     execute arbitrary code with kernel privileges. (CVE-2023-27933)

  - A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
    (CVE-2023-27934)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or     arbitrary code execution. (CVE-2023-27935)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be     able to cause unexpected system termination or write kernel memory. (CVE-2023-27936)

  - An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura     13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4.
    Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution.
    (CVE-2023-27937)

  - A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to     disclose kernel memory. (CVE-2023-27941, CVE-2023-28200)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to     access user-sensitive data. (CVE-2023-27942)

  - This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox. (CVE-2023-27944)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura     13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously     crafted file may lead to unexpected app termination or arbitrary code execution. (CVE-2023-27946)

  - An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura     13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead     to unexpected app termination or arbitrary code execution. (CVE-2023-27949)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper. (CVE-2023-27951)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or     corrupt kernel memory. (CVE-2023-27953, CVE-2023-27958)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and     iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary     files. (CVE-2023-27955)

  - Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS     Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4,     macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
    (CVE-2023-27961)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS     Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system.
    (CVE-2023-27962)

  - The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS     16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A     shortcut may be able to use sensitive data with certain actions without prompting the user.
    (CVE-2023-27963)

  - A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy     preferences. (CVE-2023-28178)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4,     watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. (CVE-2023-28181)

  - The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4     and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a     privileged network position may be able to spoof a VPN server that is configured with EAP-only     authentication on a device. (CVE-2023-28182)

  - An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4,     macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS     15.7.4. An app may be able to cause a denial-of-service. (CVE-2023-28185)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey     12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information. (CVE-2023-28189)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3,     macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
    (CVE-2023-28192)

  - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data.
    (CVE-2023-28197)

  - An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with     improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose     kernel memory. (CVE-2023-28199)

  - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS     Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey     12.6.4. Processing a font file may lead to arbitrary code execution. (CVE-2023-32366)

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with     kernel privileges. (CVE-2023-32378)

  - This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur     11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent     sandbox restrictions. (CVE-2023-40398)

  - A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5,     macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app     may be able to execute arbitrary code with kernel privileges. (CVE-2023-41075)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2db4df65c3 advisory.

    The newest upstream commit

    Security fixes for CVE-2023-0433, CVE-2022-47024

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of vim installed on the remote host is prior to 9.0.1241. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-025-02 advisory.

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0433 advisory.

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This     vulnerability is capable of crashing the software, memory modification, and possible remote execution.
    (CVE-2022-1720)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. (CVE-2022-1725)

  - Buffer Over-read in GitHub repository vim/vim prior to 8.2. (CVE-2022-2124, CVE-2022-2175)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-2125, CVE-2022-2182,     CVE-2022-2207)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. (CVE-2022-2126, CVE-2022-2183,     CVE-2022-2206)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. (CVE-2022-2208)

  - Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. (CVE-2022-2210)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. (CVE-2022-2257, CVE-2022-2287)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. (CVE-2022-2264, CVE-2022-2284)

  - Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. (CVE-2022-2285)

  - Use After Free in GitHub repository vim/vim prior to 9.0. (CVE-2022-2289)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. (CVE-2022-2304)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0046. (CVE-2022-2345)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. (CVE-2022-2571)

  - Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
    (CVE-2022-2845)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. (CVE-2022-2923)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. (CVE-2022-2980)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. (CVE-2022-3234)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0490. (CVE-2022-3235)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0530. (CVE-2022-3256)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. (CVE-2022-3296)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0579. (CVE-2022-3297)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. (CVE-2022-3324)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0614. (CVE-2022-3352)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. (CVE-2022-3520)

  - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function     qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use     after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this     issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the     affected component. The identifier of this vulnerability is VDB-212324. (CVE-2022-3705)

  - Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the     expression used in the RHS of the substitute command. (CVE-2022-4141)

  - Use After Free in GitHub repository vim/vim prior to 9.0.0882. (CVE-2022-4292)

  - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. (CVE-2023-0049)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. (CVE-2023-0288)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5963-1 advisory.

    It was discovered that Vim was not properly performing memory management operations. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected     Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-47024, CVE-2023-0049,     CVE-2023-0054, CVE-2023-0288, CVE-2023-0433)

    It was discovered that Vim was not properly performing memory management

    operations. An attacker could possibly use this issue to cause a denial

    of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 22.10.
    (CVE-2023-0051)

    It was discovered that Vim was not properly performing memory management

    operations. An attacker could possibly use this issue to cause a denial

    of service or execute arbitrary code. (CVE-2023-1170, CVE-2023-1175)

    It was discovered that Vim was not properly performing memory management

    operations. An attacker could possibly use this issue to cause a denial

    of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and     Ubuntu 22.10. (CVE-2023-1264)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-117 advisory.

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. (CVE-2022-3234)

    Use After Free in GitHub repository vim/vim prior to 9.0.0490. (CVE-2022-3235)

    Use After Free in GitHub repository vim/vim prior to 9.0.0530. (CVE-2022-3256)

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. (CVE-2022-3278)

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. (CVE-2022-3296)

    Use After Free in GitHub repository vim/vim prior to 9.0.0579. (CVE-2022-3297)

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. (CVE-2022-3324)

    Use After Free in GitHub repository vim/vim prior to 9.0.0614. (CVE-2022-3352)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. (CVE-2022-3491)

    A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim     8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
    (CVE-2022-47024)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. (CVE-2023-0051)

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. (CVE-2023-0054)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. (CVE-2023-0288)

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. (CVE-2023-0433)

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. (CVE-2023-0512)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
203280	Photon OS 4.0: Vim PHSA-2023-4.0-0330	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	high
176614	EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2023-2009)	Nessus	Huawei Local Security Checks	2023/6/2	2023/6/2	high
173284	Amazon Linux AMI : vim (ALAS-2023-1703)	Nessus	Amazon Linux Local Security Checks	2023/3/22	2024/12/11	high
175515	EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1858)	Nessus	Huawei Local Security Checks	2023/5/13	2023/5/13	high
179014	EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2023-2471)	Nessus	Huawei Local Security Checks	2023/7/28	2023/7/28	high
170913	Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5836-1)	Nessus	Ubuntu Local Security Checks	2023/1/31	2024/8/28	high
173439	macOS 12.x < 12.6.4 Multiple Vulnerabilities (HT213677)	Nessus	MacOS X Local Security Checks	2023/3/27	2024/8/22	critical
173444	macOS 13.x < 13.3 Multiple Vulnerabilities (HT213670)	Nessus	MacOS X Local Security Checks	2023/3/27	2024/9/20	critical
171385	Fedora 37 : vim (2023-2db4df65c3)	Nessus	Fedora Local Security Checks	2023/2/12	2024/11/14	high
170652	Slackware Linux 15.0 / current vim Vulnerability (SSA:2023-025-02)	Nessus	Slackware Local Security Checks	2023/1/25	2023/9/6	high
172810	CBL Mariner 2.0 Security Update: vim (CVE-2023-0433)	Nessus	MarinerOS Local Security Checks	2023/3/20	2025/2/10	high
175999	EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1988)	Nessus	Huawei Local Security Checks	2023/5/17	2023/5/17	high
179001	EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2023-2496)	Nessus	Huawei Local Security Checks	2023/7/28	2023/7/28	high
177157	EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)	Nessus	Huawei Local Security Checks	2023/6/13	2024/1/16	critical
173039	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5963-1)	Nessus	Ubuntu Local Security Checks	2023/3/20	2025/9/3	high
173104	Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-117)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	high
203991	Photon OS 3.0: Vim PHSA-2023-3.0-0529	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high

检测

插件搜索

high

high

high

high

high

high

critical

critical

high

high

high

high

high

critical

high

high

high