Malicious code in DiscordRichPresenceAPI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in DiscordRіchPreseոcе (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-38506

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting XSS vulnerability allows pasting untrusted data into the rich text editor to execute arbitrary code. HTML pasted into the rich text editor is not sanitized or not sanitized properly. As such, the onload...

PT-2024-12733 · Tinymce +2 · Tinymce +2

Name of the Vulnerable Software and Affected Versions: Joplin versions prior to 2.12.10 Description: A Cross-site Scripting XSS issue in Joplin allows the execution of arbitrary code when pasting untrusted data into the rich text editor. This occurs because HTML pasted into the editor is not...

CVE-2024-38357

TinyMCE is an open source rich text editor. A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. This vulnerability has bee...

CVE-2024-38357

Removed by vendor...

CVE-2024-38356

Removed by vendor...

CVE-2024-5829

CVE-2024-5829 affects smallweigit Avue up to version 3.4.4, where an issue in the avueUeditor component enables cross-site scripting via an unknown function. Attack is remote and the exploit has been disclosed publicly. The vulnerability stems from how avueUeditor handles rich text and the code m...

ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`

ZendDojoViewHelperEditor was incorrectly decorating a TEXTAREA instead of a DIV. The Dojo team has reported that this has security implications as the rich text editor they use is unable to escape content for a TEXTAREA...

GHSA-J543-VG33-G6VJ ZendFramework potential Cross-site Scripting vector in `Zend_Dojo_View_Helper_Editor`

ZendDojoViewHelperEditor was incorrectly decorating a TEXTAREA instead of a DIV. The Dojo team has reported that this has security implications as the rich text editor they use is unable to escape content for a TEXTAREA...

SUSE CVE-2024-32464

Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a richtextarea tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2...

Cross-site Scripting (XSS)

Overview actiontext is a package to edit and display rich text in Rails applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS within the Trix editor via ActionText::Attachable::ContentAttachment in the richtextarea tag. An attacker can introduce malicious...

CVE-2024-32464

Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a richtextarea tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2...

UBUNTU-CVE-2024-32464

Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a richtextarea tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2...

PT-2024-24592 · Unknown · Actiontext

Name of the Vulnerable Software and Affected Versions: ActionText versions 7.1.0 through 7.1.3.3 ActionText version 7.2.0.beta1 Description: The issue arises from instances of ActionText::Attachable::ContentAttachment included within a rich text area tag, which could potentially contain unsanitiz...

OPENSUSE-SU-2024:0142-1 Security update for opera

This update for opera fixes the following issues: - Update to 110.0.5130.39 DNA-115603 Rich Hints Pass trigger source to the Rich Hint DNA-116680 Import 0-day fix for CVE-2024-5274 - Update to 110.0.5130.35 CHR-9721 Update Chromium on desktop-stable-124-5130 to 124.0.6367.202 DNA-114787 Crash at...

Malicious code in rich-relevance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5443947e62cbe3633e1bc05cb45ee61214822d2115a1f87f6cf25a4c141d226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1383 Malicious code in rich-relevance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5443947e62cbe3633e1bc05cb45ee61214822d2115a1f87f6cf25a4c141d226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-44478

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...

CVE-2023-44478 WordPress Events Rich Snippets for Google plugin <= 1.8 - CSRF Leading to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events Rich Snippets for Google: from n/a through 1.8...