Lucene search
+L

997 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/29 12:00 a.m.•16 views

The vulnerability of the `ga_grow_inner` function in the Vim text editor is caused by a numerical overflow condition, which allows an attacker to trigger a service failure.

The vulnerability of the gagrowinner function in the Vim text editor, a software for Unix-based systems, is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

4CVSS6.5AI score0.00366EPSS
SaveExploits1References8Affected Software4
OSV
OSV
•added 2023/10/27 9:15 p.m.•21 views

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

9.8CVSS6.1AI score0.00807EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/10/27 9:15 p.m.•9 views

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

9.8CVSS6.2AI score0.00807EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/10/27 12:00 a.m.•19 views

Contec SolarView Compact Security Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides a photovoltaic power measurement system. A security vulnerability exists in Contec SolarView Compact v.6.0 and earlier versions, which originated from a vulnerability that allows attackers to execute arbitrary code v...

9.8CVSS7.7AI score0.00807EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/10/19 10:15 p.m.•25 views

CVE-2023-45818

TinyMCE is an open source rich text editor. A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE’s core undo and redo functionality. When a carefully-crafted HTML snippet passes the XSS sanitisation layer, it is manipulated as a string by internal trimming functions before...

6.1CVSS6.1AI score0.0062EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/10/19 12:00 a.m.•43 views

Vim < 9.0.2010 Use-After-Free

Use After Free in GitHub repository vim/vim prior to v9.0.2010. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183414; scriptversion"1.4";...

7.8CVSS6.7AI score0.0051EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/10/16 12:00 a.m.•32 views

Fedora: Security Advisory for emacs (FEDORA-2023-29df561f1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.01639EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/10/14 1:27 a.m.•68 views

[SECURITY] Fedora 37 Update: emacs-28.3-0.rc1.fc37

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

9.8CVSS6.8AI score0.01639EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/10/05 12:00 a.m.•7 views

PT-2023-8851 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim versions prior to 20d161ace307e28690229b68584f2d84556f8960 Description: The issue is related to a NULL pointer dereference in the exmode of the vim text editor. Exploitation of this issue may allow an attacker to cause a denial of service...

7.8CVSS6.2AI score0.0119EPSS
SaveExploits13References134
OpenVAS
OpenVAS
•added 2023/10/05 12:00 a.m.•20 views

Fedora: Security Advisory for ckeditor (FEDORA-2023-79b5902a52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00725EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/10/04 3:51 p.m.•115 views

[SECURITY] Fedora 38 Update: ckeditor-4.22.1-1.fc38

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
Fedora
Fedora
•added 2023/10/04 3:49 p.m.•44 views

[SECURITY] Fedora 37 Update: ckeditor-4.22.1-1.fc37

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
Debian
Debian
•added 2023/09/29 1:52 p.m.•142 views

[SECURITY] [DLA 3588-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 29, 2023 https://wiki.debian.org/LTS -...

7.8CVSS8.8AI score0.00613EPSS
SaveExploits2
Fedora
Fedora
•added 2023/09/28 1:37 a.m.•81 views

[SECURITY] Fedora 38 Update: emacs-28.3-0.rc1.fc38

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

9.8CVSS6.8AI score0.01639EPSS
SaveExploits0
NVD
NVD
•added 2023/09/25 4:15 p.m.•23 views

CVE-2023-4892

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

5.7CVSS5.6AI score0.00445EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/25 4:15 p.m.•19 views

Design/Logic Flaw

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

4.9CVSS4.9AI score0.00445EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/09/25 3:55 p.m.•80 views

CVE-2023-4892

CVE-2023-4892 affects Teedy v1.11, with a cross-site scripting (stored XSS) vulnerability in the text editor that lets attacker-supplied HTML/JS be executed in the web application. Impact stated: ability to run malicious JavaScript within the webapp. Exploitation details are not provided in the c...

5.7CVSS4.9AI score0.00445EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/09/25 3:55 p.m.•30 views

CVE-2023-4892 Teedy v1.11 - Stored cross-site scripting (XSS)

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

5.7CVSS6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/25 12:00 a.m.•1 views

CVE-2023-4892: Improper Neutralization of Input During Web Page Generation

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

5.7CVSS5.8AI score0.00445EPSS
SaveExploits1References3
Veracode
Veracode
•added 2023/09/22 10:18 a.m.•18 views

Cross Site Scripting

xdsoft.net is vulnerable to Cross Site Scripting vulnerability. The vulnerability is due to improper sanitization of user input in the rich text editor component. This can be exploited by the attacker by injecting malicious input to execute Javascript on client side...

6.1CVSS6.7AI score0.00539EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder