Lucene search
+L

30 matches found

attackerkb
attackerkb
•added 2021/08/13 12:15 a.m.•13 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS5.4AI score0.01318EPSS
SaveExploits0References12Affected Software1
Prion
Prion
•added 2021/08/13 12:15 a.m.•40 views

Design/Logic Flaw

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

3.5CVSS5.6AI score0.01318EPSS
SaveExploits0References8Affected Software12
UbuntuCve
UbuntuCve
•added 2021/08/13 12:15 a.m.•50 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.5AI score0.01318EPSS
SaveExploits0References5
OSV
OSV
•added 2021/08/13 12:15 a.m.•13 views

UBUNTU-CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.5AI score0.01318EPSS
SaveExploits0References6
Mend
Mend
•added 2021/08/12 11:10 p.m.•2 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 "Fake Objects" https://ckeditor.com/cke4/addon/fakeobjects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executin...

8.5CVSS0.01318EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2021/08/12 11:10 p.m.•41 views

CVE-2021-37695 Execution of JavaScript code using malformed HTML in ckeditor

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.7AI score0.01318EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2021/08/12 11:10 p.m.•34 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.1AI score0.01318EPSS
SaveExploits0
CVE
CVE
•added 2021/08/12 11:10 p.m.•358 views

CVE-2021-37695

CKEditor 4 vulnerability CVE-2021-37695 involves the Fake Objects addon. The issue allows injection of malformed Fake Objects HTML that can lead to JavaScript execution in affected CKEditor 4 plugins when used at versions prior to 4.16.2. Public references in connected documents confirm the affec...

7.3CVSS6AI score0.01318EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/12 12:00 a.m.•3 views

PT-2021-21815

Name of the Vulnerable Software and Affected Versions CKEditor 4 versions prior to 4.16.2 Description A potential vulnerability has been discovered in the CKEditor 4 Fake Objects package, allowing the injection of malformed Fake Objects HTML, which could result in executing JavaScript code. This...

7.3CVSS0.01318EPSS
SaveExploits0References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•8 views

CVE-2021-37695: Improper Neutralization of Input During Web Page Generation

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.7AI score0.01318EPSS
SaveExploits0References3
Rows per page
Query Builder