CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

922 matches found

Prion•added 2023/10/19 10:15 p.m.•20 views

Cross site scripting

TinyMCE is an open source rich text editor. A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE’s core undo and redo functionality. When a carefully-crafted HTML snippet passes the XSS sanitisation layer, it is manipulated as a string by internal trimming functions before...

5.8CVSS5.7AI score0.0062EPSS

SaveExploits0References5Affected Software1

UbuntuCve•added 2023/10/19 10:15 p.m.•26 views

CVE-2023-45819

TinyMCE is an open source rich text editor. A cross-site scripting XSS vulnerability was discovered in TinyMCE’s Notification Manager API. The vulnerability exploits TinyMCE's unfiltered notification system, which is used in error handling. The conditions for this exploit requires carefully craft...

6.1CVSS6.5AI score0.00601EPSS

SaveExploits0References2

UbuntuCve•added 2023/10/19 10:15 p.m.•23 views

CVE-2023-45818

6.1CVSS6.1AI score0.0062EPSS

SaveExploits0References6

OSV•added 2023/10/19 10:15 p.m.•8 views

UBUNTU-CVE-2023-45818

6.1CVSS5.6AI score0.0062EPSS

SaveExploits0References7

OSV•added 2023/10/19 10:15 p.m.•7 views

UBUNTU-CVE-2023-45819

6.1CVSS6AI score0.00601EPSS

SaveExploits0References3

Prion•added 2023/10/19 10:15 p.m.•20 views

Cross site scripting

5.8CVSS6.1AI score0.00601EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/10/19 9:18 p.m.•51 views

CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin

6.1CVSS5.9AI score0.0062EPSS

SaveExploits0References5

Debian CVE•added 2023/10/19 9:18 p.m.•109 views

CVE-2023-45818

Removed by vendor...

6.1CVSS6.2AI score0.0062EPSS

SaveExploits0

OSV•added 2023/10/19 9:18 p.m.•33 views

CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin

6.1CVSS5.5AI score

SaveExploits0References7

CVE•added 2023/10/19 9:18 p.m.•94 views

CVE-2023-45818

Concrete details confirm CVE-2023-45818 affects TinyMCE undo/redo logic, where HTML is mutated by a combination of string trimming and reparative parsing when restoring from the undo stack, enabling XSS. The issue also affects related APIs/plugins (tinymce.Editor.getContent({ format: 'raw' }), re...

6.1CVSS5.8AI score0.0062EPSS

SaveExploits0References5Affected Software1

Vulnrichment•added 2023/10/19 9:18 p.m.•19 views

CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin

6.1CVSS5.2AI score0.0062EPSS

SaveExploits0References5

Cvelist•added 2023/10/19 9:13 p.m.•55 views

CVE-2023-45819 Cross-site Scripting vulnerability in TinyMCE notificationManager.open API

6.1CVSS6.2AI score0.00601EPSS

SaveExploits0References1

CVE•added 2023/10/19 9:13 p.m.•74 views

CVE-2023-45819

CVE-2023-45819 is a cross-site scripting vulnerability in TinyMCE’s Notification Manager API. An attacker could trigger arbitrary JavaScript execution by injecting unfiltered HTML into a notification text displayed in the TinyMCE UI for the current user, requiring crafted content and a notificati...

6.1CVSS6AI score0.00601EPSS

SaveExploits0References1Affected Software1

Debian CVE•added 2023/10/19 9:13 p.m.•109 views

CVE-2023-45819

Removed by vendor...

6.1CVSS6.2AI score0.00601EPSS

SaveExploits0

Vulnrichment•added 2023/10/19 9:13 p.m.•13 views

CVE-2023-45819 Cross-site Scripting vulnerability in TinyMCE notificationManager.open API

6.1CVSS5.6AI score0.00601EPSS

SaveExploits0References1

OSV•added 2023/10/19 9:13 p.m.•26 views

CVE-2023-45819 Cross-site Scripting vulnerability in TinyMCE notificationManager.open API

6.1CVSS5.8AI score

SaveExploits0References3

OSV•added 2023/10/19 4:42 p.m.•16 views

GHSA-HGQX-R2HP-JR38 TinyMCE XSS vulnerability in notificationManager.open API

Impact A cross-site scripting XSS vulnerability was discovered in TinyMCE’s Notification Manager API. The vulnerability exploits TinyMCE's unfiltered notification system, which is used in error handling. The conditions for this exploit requires carefully crafted malicious content to have been...

6.1CVSS6.1AI score0.00601EPSS

SaveExploits0References5

vulnersOsv•added 2023/10/19 4:42 p.m.•7 views

@arkxio/ark-ui (>=0.1.0 <=0.1.18), @arkxio/ark-ui-src (=0.1.0) +34 more potentially affected by CVE-2023-45819 via tinymce (>=6.0.0 <=6.6.2)

tinymce NPM version =6.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2023-45819 Source advisory: OSV:GHSA-HGQX-R2HP-JR38...

6.1CVSS6.3AI score0.00601EPSS

SaveExploits0

vulnersOsv•added 2023/10/19 4:42 p.m.•12 views

@agentlab/ldkg-ui-basetable (=0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2 <=0.1.7) +329 more potentially affected by CVE-2023-45819 via tinymce (>=4.5.1 <=5.10.7)

tinymce NPM version =4.5.1, =0.1.2, =0.3.7, =0.1.17, =1.0.0, =1.0.0, =1.33.0, =1.0.0-alpha.39-baliz, =4.3.0, =0.5.0, =0.1.0, =0.0.4, =0.1.2, =0.8.4, =0.8.5 and more Source cves: CVE-2023-45819 Source advisory: OSV:GHSA-HGQX-R2HP-JR38...

6.1CVSS6.3AI score0.00601EPSS

SaveExploits0

Github Security Blog•added 2023/10/19 4:42 p.m.•65 views

TinyMCE XSS vulnerability in notificationManager.open API

6.1CVSS6.7AI score0.00601EPSS

SaveExploits0References5Affected Software2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by