CVE-2023-0288

HighCVSS 7.8/10Last modified Sep 24, 2026

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2023
Last modified
Sep 24, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-02895.4Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.CVE-2023-02904.3Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where tCVE-2023-02919.1The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated CVE-2023-02928.1The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This isCVE-2023-02934.3The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its ACVE-2023-02944.3The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.CVE-2023-02954.8The Launchpad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its settings parameters in versions up to, anCVE-2023-02965.3The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy compCVE-2023-02979.8Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.CVE-2023-02986.5Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.CVE-2023-02999.8Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.CVE-2023-03005.4Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.
CVE-2023-0288: High severity, CVSS 7.8 | Vulnix