890 matches found
CVE-2023-41036
Summary (CVE-2023-41036) : MacVim for macOS is affected by an insecure interprocess communication (IPC) mechanism used before version 178. The issue arises from Apple Distributed Objects allowing one program to vend an interface to any other program on the machine, enabling a potential privilege ...
The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the utfcptr2len function in the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PT-2023-5103 · Vim +10 · Vim +10
Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.1858 Description: The issue is related to a use-after-free vulnerability in the vim text editor, specifically in the ins compl get exp function. This vulnerability is associated with the use of memory after it has be...
CVE-2023-41167
@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...
CVE-2023-41167
@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...
Vim Divide by Zero Flaw Vulnerability
Vim is a cross-platform text editor. Vim suffers from a divide-by-zero flaw vulnerability that originates from a divide-by-zero flaw in the function scrollcursorbot. An attacker can exploit this vulnerability to cause a denial of service attack...
Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away
By Waqas Bram Moolenaar, aged 62, passed away from a medical condition that rapidly progressed over the last few weeks. This is a post from HackRead.com Read the original post: Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away...
SUSE: Security Advisory (SUSE-SU-2023:2959-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:2959-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.0.2 ESR MFSA 2023-26, bsc1213230 Security fixes: - CVE-2023-3600: Fixed use-after-free in workers bmo1839703 Other fixes: - Fixed a startup crash experienced by some Windows users by blocking instances...
SUSE-SU-2023:2958-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox was updated to version 115.0.2 ESR bsc1213230: - CVE-2023-3600: Fixed Use-after-free in workers bmo1839703. Bugfixes: - Fixed a startup crash experienced by some Windows users by blocking instances of a malicious injected DLL...
WordPress Ted – WordPress Text Editor Plugin Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS)
Software Ted – WordPress Text Editor Plugin Type Plugin Vulnerable versions = 0.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 263721f4318b Credits Rafie Muhammad...
编号撤回
Tiny Technologies TinyMCE is a rich text editor from Tiny Technologies, USA. This CVE number has been withdrawn...
Kilo 输入验证错误漏洞
Kilo is a text editor with syntax highlighting and search capabilities. A security vulnerability exists in Antirez Kilo that originates from allowing remote attackers to cause a system denial of service via the editorUpdateRow function...
ROS-20230616-07
Vim text editor vulnerability is related to the error of dereferencing NULL pointer in the function getregister in the register.c file. Exploitation of the vulnerability could allow an attacker acting remotely to trick a victim into opening a specially crafted file and remotely, trick the victim...
ROS-20230616-03
Vim text editor vulnerability is related to using pointer offset outside the allowed range in mbcharlen function in mbyte.c. range in the mbcharlen function in mbyte.c. Exploitation of the vulnerability could allow an attacker, remotely, trick the victim into opening a specially crafted file and...
CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...
CVE-2023-34245
The CVE-2023-34245 issue affects @udecode/plate-link, the link handler for the Plate editor (Slate/React). Affected versions allow JavaScript: URLs to be rendered into the DOM due to inadequate URL sanitization, enabling potential XSS through links inserted by various means. The patch in plate-li...