CVE-2021-35568

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2021-35568

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Rich Text Editor. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2021-81814)

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for delivering PeopleSoft applications that are synchronized with users' needs and expectations. An unspecified vulnerability in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools versions 8.57, 8.58, and 8.59...

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for delivering PeopleSoft applications that are synchronized with users' needs and expectations. An unspecified vulnerability in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools versions 8.57, 8.58, and 8.59...

ferris-rich-input (=0.0.1) potentially affected by CVE-2021-26272 via ckeditor4 (=4.14.0)

ckeditor4 NPM version =4.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on ckeditor4 and may be impacted: - ferris-rich-input =0.0.1 Source cves: CVE-2021-26272 Source advisory: OSV:GHSA-WPVM-WQR4-P7CW...

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability...

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability...

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability...

Information disclosure

Rich Text Edit Control Information Disclosure Vulnerability...

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2021-40454 Rich Text Edit Control Information Disclosure Vulnerability

...

Rich Text Edit Control Information Disclosure Vulnerability

...

KLA12316 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Rich Text Edit Contr...

KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a...

PT-2021-4425 · Microsoft · Windows Rich Text Edit Control +2

Name of the Vulnerable Software and Affected Versions: Windows Rich Text Edit Control affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Rich Text Edit Control of the Windows operating system. This vulnerability can be exploited by ...

Microsoft Rich Text Edit Control 信息泄露漏洞

Microsoft Rich Text Edit Control is an implementation of a rich text editor from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Rich Text Edit Control, which arises from a configuration or other error in the operation of a networked system or product. An...

The vulnerability of CKEditor’s WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the CKEditor WYSIWYG editor is related to the incorrect processing of the “--!” comment. Exploiting this vulnerability may allow an attacker to compromise the integrity of the data...

Concrete CMS Cross-Site Scripting Vulnerability

Concrete CMS is an open source content management system for teams.A stored cross-site scripting vulnerability exists in Conversations in Concrete CMS 8.5.5 and earlier versions when the "Active Conversation Editor" is set to rich text. An attacker could exploit this vulnerability to insert...

CVE-2021-40100

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text...