Vim Memory Misreference Vulnerability (CNVD-2022-46167)

Vim is a cross-platform text editor, and a memory mis-reference vulnerability exists in versions prior to Vim 8.2. The vulnerability stems from a mix-up in the program's instructions for freeing memory. An attacker could exploit this vulnerability to potentially crash the program, execute arbitra...

Binary vulnerability in vim (CNVD-2022-50689)

Vim is a cross-platform text editor. A binary vulnerability exists in vim, which can be exploited by an attacker to gain control of a server...

The vulnerability of the Vim text editor, related to the pointer shifting beyond the selected memory range, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to the pointer being moved beyond the selected memory range. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created file...

The vulnerability in the implementation of the vim_regexec_string() function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially crafted input data...

ROS-20220530-01

A vulnerability in the Vim text editor is related to boundary conditions in the getonesourceline function. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a read error outside the boundary conditions, and...

ROS-20220525-01

A vulnerability in the Vim text editor is related to a boundary error when processing unreliable input data. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file and initiate unauthorized writing and execution of...

less bug fix and enhancement update

An update is available for less. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The "less" utility is a text file browser that resembles "more", but allows user...

ROS-20220516-11

Vim text editor vulnerability is related to NULL pointer dereferencing error in function vimregexecstring in regexp.c. Exploitation of the vulnerability could allow an attacker acting remotely to trick a victim into accessing the Vim text editor. remotely, trick the victim into opening a speciall...

GHSA-44XP-WJ24-9XXJ Moodle allows attackers to delete files

The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button i...

Vim Resource Management Error Vulnerability (CNVD-2022-36993)

Vim, a cross-platform text editor, is vulnerable to a resource management error in versions prior to Vim 8.2.4895, which stems from a confusion in the appendcommand program's command for freeing memory. An attacker could use this vulnerability to crash the program, execute arbitrary code, etc...

The vulnerability of the Vim text editor, caused by buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of the Vim text editor arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20220412-01

Vim text editor vulnerability, related to a boundary error in file processing. Exploitation vulnerability could allow a remote attacker to trick a victim into opening a specially crafted file, causing memory corruption and executing arbitrary code on the target system. a specially crafted file,...

ROS-20220407-02

Vim text editor vulnerability, related to memory usage error after release in function utfptr2char in regexpbt.c. Exploitation of the vulnerability could allow an attacker acting remotely, trick a victim into opening a specially crafted file, raise a post-release usage error, and execute arbitrar...

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain access to data and compromise its integrity.

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data and compromise its...

ROS-20220301-02

Vim text editor vulnerability, related to NULL pointer dereferencing error in Vim when switching tabs in command line window. when switching tabs in a command line window. Exploitation of the vulnerability could allow an attacker, remotely to perform a denial-of-service DoS attack...

The vulnerability of the spellsuggest.c component of the Vim text editor allows a hacker to trigger a buffer overflow.

The vulnerability of the spellsuggest.c component of the Vim text editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a buffer overflow...

WordPress Ted – WordPress Text Editor plugin <= 0.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ted – WordPress Text Editor plugin versions = 0.0.4. Solution Update the WordPress Ted – WordPress Text Editor plugin to the latest available version at least 0.0.5...

WordPress Ted – WordPress Text Editor plugin <= 0.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ted – WordPress Text Editor plugin versions = 0.0.4. Solution Update the WordPress Ted – WordPress Text Editor plugin to the latest available version at least 0.0.5...

The vulnerability of Microsoft Word’s text editor lies in its improper handling of code generation, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Persistence – Notepad++ Plugins

It is not uncommon a windows environment especially dedicated servers which are managed by developers or IT staff to have installed the Notepad++ text editor.… Continue reading - Persistence - Notepad++ Plugins...