Lucene search
+L

20152 matches found

Fedora
Fedora
•added 2026/03/08 1:26 a.m.•14 views

[SECURITY] Fedora 43 Update: vim-9.2.112-2.fc43

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.8CVSS6.5AI score0.01353EPSS
SaveExploits0
EUVD
EUVD
•added 2026/03/07 9:30 a.m.•25 views

EUVD-2026-10132

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS5.9AI score0.00166EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/07 8:16 a.m.•18 views

CVE-2026-1820

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/07 7:22 a.m.•52 views

CVE-2026-1820 Media Library Alt Text Editor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_id' Shortcode Attribute

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00166EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/07 7:22 a.m.•41 views

CVE-2026-1820

The CVE CVE-2026-1820 concerns the WordPress plugin Media Library Alt Text Editor, vulnerable to an authenticated Stored Cross-Site Scripting (XSS) via shortcode attributes (notably post_id and bvmalt_sc_div_update_alt_text) in versions up to 1.0.0. The issue arises from insufficient input saniti...

6.4CVSS6.1AI score0.00166EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/07 7:22 a.m.•9 views

CVE-2026-1820

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS5.9AI score0.00166EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/07 7:22 a.m.•9 views

CVE-2026-1820 Media Library Alt Text Editor <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_id' Shortcode Attribute

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS6.1AI score0.00166EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/03/07 2:06 a.m.•25 views

WordPress Media Library Alt Text Editor plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'postid' Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Media Library Alt Text Editor versions = 1.0.0...

6.4CVSS5.8AI score0.00166EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
•added 2026/03/07 12:34 a.m.•24 views

[SECURITY] Fedora 44 Update: gimp-3.0.8-5.fc44

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for web pages. GIMP has many of the tools and filters you would expe ct to find in similar commercial offerings, and some interesting extras...

5.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/03/07 12:00 a.m.•20 views

PT-2026-26460

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists within the parsing of PSP files, allowing remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required, specifically the target must...

7.8CVSS8.1AI score0.00744EPSS
SaveExploits0References79
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•23 views

WordPress plugin Media Library Alt Text Editor: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.5AI score0.00166EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/07 12:00 a.m.•7 views

CVE-2026-1820: Improper Neutralization of Input During Web Page Generation

The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmaltscdivupdatealttext' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS6.1AI score0.00166EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2026/03/06 11:10 a.m.•19 views

OESA-2026-1501 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7.5CVSS6.7AI score0.00341EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/06 7:14 a.m.•15 views

Malicious Package

Overview prismjs-editor-v1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•13 views

Vim Buffer Overflow DoS

The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.3CVSS6.9AI score0.00206EPSS
SaveExploits0References13Affected Software12
Tenable Nessus
Tenable Nessus
•added 2026/03/06 12:00 a.m.•12 views

Vim < 9.2.0074 Heap-based Buffer Overflow (GHSA-h4mf-vg97-hj8j)

The version of Vim installed on the remote host is prior to 9.2.0074. It is, therefore, affected by a vulnerability as referenced in the GHSA-h4mf-vg97-hj8j advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exis...

5.5CVSS6.6AI score0.00257EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•23 views

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

2.2CVSS7.2AI score0.00165EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•13 views

Vim Use-After-Free DoS

The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

4.4CVSS6.8AI score0.00206EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•14 views

Vim Use-After-Free DoS

The vulnerability of the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.3CVSS6.8AI score0.00196EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•15 views

Vim Use-After-Free

The vulnerability of the Vim text editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the accessibility of the protected information...

5.5CVSS6.9AI score0.00257EPSS
SaveExploits0References14Affected Software9
Rows per page
Query Builder