CVE-2019-20807

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
May 28, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-208086.5In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handliCVE-2019-208097.5The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset CVE-2019-20818.8In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additionaCVE-2019-208105.5go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, whicCVE-2019-208115.5An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, CVE-2019-208125.5An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a dCVE-2019-208137.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.CVE-2019-208147.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an applicatCVE-2019-208157.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.CVE-2019-208167.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.CVE-2019-208177.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.CVE-2019-208187.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an
CVE-2019-20807: Medium severity, CVSS 5.3 | Vulnix