890 matches found
[SECURITY] Fedora 33 Update: ckeditor-4.16.2-1.fc33
CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...
[SECURITY] Fedora 34 Update: ckeditor-4.16.2-1.fc34
CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...
[SECURITY] Fedora 35 Update: ckeditor-4.16.2-1.fc35
CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...
PortlandLabs Concrete Cms 跨站脚本漏洞
Concrete CMS is an open source content management system for teams.A stored cross-site scripting vulnerability exists in Conversations in Concrete CMS 8.5.5 and earlier versions when the "Active Conversation Editor" is set to rich text. An attacker could exploit this vulnerability to insert...
The vulnerability of the WYSIWYG Editor module of the Dolibarr resource planning and customer relationship management system allows a hacker to gain access to the administrator account.
The vulnerability of the WYSIWYG Editor module in the Dolibarr system for resource planning and managing customer relationships exists due to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to remotely gain control of the administrat...
vim post-release reuse vulnerability (CNVD-2021-99302)
Vim is a powerful and highly customizable text editor, an improved version of vi that improves upon and adds many features to Vi. vim version 8.2.3425 is vulnerable to a post-release reuse vulnerability. An attacker could exploit this vulnerability to execute code...
XSS vulnerability in wangEditor
wangEditor is a Web rich text editor . An XSS vulnerability exists in wangEditor, which can be exploited by attackers to obtain sensitive information such as user cookies...
The vulnerability of Microsoft Word’s text editor, related to errors in code generation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Word relates to errors in code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Shopify: Stored XSS in /admin/product and /admin/collections
Hello Security Team, I was going through previous reports of XSS and I have found this, https://hackerone.com/reports/978125 As stated by team on this page even on https://hackerone.com/shopify?type=team under Known issues that we can now report XSS under Rich Text Editor on Product description a...
The vulnerability of CodeMirror’s text editor, related to a bug in the resource consumption monitoring mechanism, allows attackers to trigger a service failure.
The vulnerability of CodeMirror’s text editor is related to a bug in the resource management mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2020-14988
An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...
CVE-2020-14988
An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the...
The vulnerability in the regex.c component of the text editor ed, which allows a hacker to trigger a service failure.
The vulnerability of the regex.c component in the text editor ed is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2021-21254
CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...
Binary vulnerability exists in VIM (CNVD-2021-12708)
VIM is a text editor developed from vi. VIM has a binary vulnerability that can be exploited by attackers to cause a denial of service...
Binary vulnerability exists in VIM (CNVD-2021-12709)
VIM is a text editor developed from vi. VIM has a binary vulnerability that can be exploited by attackers to cause a denial of service...
Binary vulnerability exists in VIM (CNVD-2021-12705)
VIM is a text editor developed from vi. VIM has a binary vulnerability that can be exploited by attackers to cause a denial of service...
Vim has a binary vulnerability (CNVD-2021-12721)
Vim is a text editor developed from vi. A binary vulnerability exists in Vim. An attacker could exploit this vulnerability to cause the program to crash...