Lucene search
+L

882 matches found

OSV
OSV
added 2023/09/19 6:30 a.m.25 views

GHSA-95XR-CQ6H-VWR3 Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00434EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/09/19 6:30 a.m.38 views

Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.1AI score0.00434EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/19 4:15 a.m.3 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.4AI score0.00434EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/19 4:15 a.m.6 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00434EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/09/19 12:0 a.m.11 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
added 2023/09/18 3:15 p.m.38 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

5.4CVSS5.7AI score0.00549EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/18 12:0 a.m.38 views

CVE-2023-42371

CVE-2023-42371 maps to a Cross-Site Scripting vulnerability in Summernote Rich Text Editor up to v0.8.18. Reported weakness allows a remote attacker to execute arbitrary code via a crafted script inserted through the editor’s insert link function. The issue is described consistently across multip...

5.4CVSS5.8AI score0.00549EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/09/18 12:0 a.m.37 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

6AI score0.00549EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/09/18 12:0 a.m.18 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

7.2AI score0.00549EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.18 views

The vulnerability of the Vim text editor, related to a division by zero error, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to a division by zero error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.9AI score0.00384EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.9 views

The vulnerability of Microsoft Word’s text editor, related to errors in processing input data, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.01017EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2023/09/13 12:0 a.m.28 views

Vim buffer overflow vulnerability (CNVD-2023-70067)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions prior to vim 9.0.1847, which stems from an out-of-bounds write problem. An unauthenticated attacker can exploit this vulnerability to execute arbitrary code...

7.8CVSS8.1AI score0.00624EPSS
SaveExploits1References1
CVE
CVE
added 2023/09/12 7:48 p.m.66 views

CVE-2023-41036

Summary (CVE-2023-41036) : MacVim for macOS is affected by an insecure interprocess communication (IPC) mechanism used before version 178. The issue arises from Apple Distributed Objects allowing one program to vend an interface to any other program on the machine, enabling a potential privilege ...

7.8CVSS7.5AI score0.00344EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.10 views

The vulnerability of the utfc_ptr2len() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the utfcptr2len function in the Vim text editor is related to the execution of an operation outside the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00598EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.3 views

PT-2023-5103 · Vim +10 · Vim +10

Name of the Vulnerable Software and Affected Versions: vim versions prior to 9.0.1858 Description: The issue is related to a use-after-free vulnerability in the vim text editor, specifically in the ins compl get exp function. This vulnerability is associated with the use of memory after it has be...

8.4CVSS7.8AI score0.26583EPSS
SaveExploits40References257
NVD
NVD
added 2023/08/25 2:15 p.m.27 views

CVE-2023-41167

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

4.8CVSS4.8AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/25 12:0 a.m.11 views

CVE-2023-41167

@webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Builder. Webiny is an open-source serverless enterprise CMS. The @webiny/react-rich-text-renderer package depends on the...

4.8CVSS5.9AI score0.0034EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/08/12 12:0 a.m.11 views

Vim Divide by Zero Flaw Vulnerability

Vim is a cross-platform text editor. Vim suffers from a divide-by-zero flaw vulnerability that originates from a divide-by-zero flaw in the function scrollcursorbot. An attacker can exploit this vulnerability to cause a denial of service attack...

7.8CVSS6.4AI score0.01056EPSS
SaveExploits2References1
HackRead
HackRead
added 2023/08/07 12:11 a.m.26 views

Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away

By Waqas Bram Moolenaar, aged 62, passed away from a medical condition that rapidly progressed over the last few weeks. This is a post from HackRead.com Read the original post: Bram Moolenaar, Creator of Vim Text Editor for Linux Passes Away...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/07/26 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2023:2959-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS10AI score0.00634EPSS
SaveExploits0References4
Rows per page
Query Builder