CVE-2023-1170

MediumCVSS 6.6/10Last modified Sep 18, 2026

Description

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2023
Last modified
Sep 18, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-11726.1The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 CVE-2023-11749.8This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the CVE-2023-11756.6Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.CVE-2023-11763.3Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.CVE-2023-11779.8Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.CVE-2023-11785.7An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5,CVE-2023-11795.4A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected isCVE-2023-11806.1A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected CVE-2023-11815.4Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.CVE-2023-11835.5A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where thCVE-2023-11848.8A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionaCVE-2023-11858.8A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Pro
CVE-2023-1170: Medium severity, CVSS 6.6 | Vulnix