Lucene search
+L

997 matches found

Github Security Blog
Github Security Blog
•added 2023/09/19 6:30 a.m.•48 views

Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.1AI score0.00539EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/09/19 6:30 a.m.•68 views

GHSA-95XR-CQ6H-VWR3 Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00539EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/09/19 4:15 a.m.•7 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.4AI score0.00539EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/19 4:15 a.m.•16 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00539EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/09/19 12:00 a.m.•12 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/19 12:00 a.m.•1 views

CVE-2023-42399: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.4AI score0.00539EPSS
SaveExploits0References4
NVD
NVD
•added 2023/09/18 3:15 p.m.•49 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

5.4CVSS5.7AI score0.00614EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/18 12:00 a.m.•3 views

CVE-2023-42371: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

5.4CVSS6.6AI score0.00614EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/18 12:00 a.m.•47 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

6AI score0.00614EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/18 12:00 a.m.•49 views

CVE-2023-42371

CVE-2023-42371 maps to a Cross-Site Scripting vulnerability in Summernote Rich Text Editor up to v0.8.18. Reported weakness allows a remote attacker to execute arbitrary code via a crafted script inserted through the editor’s insert link function. The issue is described consistently across multip...

5.4CVSS5.8AI score0.00614EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/18 12:00 a.m.•22 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

7.2AI score0.00614EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/09/15 12:00 a.m.•32 views

The vulnerability of the Vim text editor, related to a division by zero error, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to a division by zero error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.9AI score0.00414EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/09/14 12:00 a.m.•19 views

The vulnerability of Microsoft Word’s text editor, related to errors in processing input data, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.00836EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2023/09/13 12:00 a.m.•53 views

Vim buffer overflow vulnerability (CNVD-2023-70067)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to vim 9.0.1847, which stems from an out-of-bounds write problem. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS8.1AI score0.00601EPSS
SaveExploits1References1
CVE
CVE
•added 2023/09/12 7:48 p.m.•76 views

CVE-2023-41036

Summary (CVE-2023-41036) : MacVim for macOS is affected by an insecure interprocess communication (IPC) mechanism used before version 178. The issue arises from Apple Distributed Objects allowing one program to vend an interface to any other program on the machine, enabling a potential privilege ...

7.8CVSS7.5AI score0.00344EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/05 12:00 a.m.•10 views

PT-2023-4995

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.1873 Description The issue is related to a heap-based buffer overflow in the vim regsub both function of the Vim text editor, which can be exploited to impact the confidentiality, integrity, and availability of...

7.8CVSS6.1AI score0.0119EPSS
SaveExploits2References92
BDU FSTEC
BDU FSTEC
•added 2023/09/05 12:00 a.m.•19 views

The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the utfcptr2len function in the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00558EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
•added 2023/09/04 12:00 a.m.•10 views

PT-2023-5103

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1858 Description The issue is related to a use-after-free vulnerability in the vim text editor, specifically in the ins compl get exp function. This vulnerability is associated with the use of memory after it has been...

7.8CVSS7.8AI score0.00565EPSS
SaveExploits1References103
NVD
NVD
•added 2023/08/25 2:15 p.m.•37 views

CVE-2023-41167

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

4.8CVSS4.8AI score0.00392EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/25 12:00 a.m.•18 views

CVE-2023-41167

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

5.9AI score
SaveExploits0References4
Rows per page
Query Builder