ROS-20230127-02

Vim text editor vulnerability is related to NULL pointer dereferencing error in function guix11createblankmouse in guix11.c. Exploiting the vulnerability could allow an attacker, remotely, trick the victim into opening a specially crafted file and performing a denial-of-service attack DoS. "denia...

[SECURITY] Fedora 36 Update: emacs-28.2-1.fc36

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

Binary vulnerability in vim (CNVD-2023-09166)

Vim is a cross-platform text editor. A security vulnerability exists in Vim that originates from an out-of-bounds memory write in the function dostringsub, which can be exploited by an attacker to trigger a denial of service and potentially run code...

Vim has a binary vulnerability (CNVD-2023-09647)

Vim is a cross-platform text editor. A security vulnerability exists in versions of Vim prior to 9.0.1144, which stems from a heap memory overflow in the function msgputsprintf, and can be exploited by an attacker to trigger a denial of service and potentially run code...

Binary vulnerability in vim (CNVD-2023-09648)

Vim is a cross-platform text editor. A security vulnerability exists in Vim that originates from an out-of-bounds memory read in the function buildstlstrhl, which can be exploited by an attacker to trigger a denial of service and potentially run code...

[SECURITY] Fedora 37 Update: emacs-28.2-1.fc37

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

Vim Buffer Overflow Vulnerability

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim Vim 9.0.0946 and earlier versions, which can be exploited to launch a buffer overflow attack by passing an incorrect pointer to a heap function such as free...

The vulnerability of the vim_regexec_string() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20221123-01

The vulnerability of qfbufaddline function of Vim text editor is related to memory usage after its release. Exploitation of the vulnerability may allow an intruder to affect the confidentiality, integrity and availability of protected information Vulnerability of the inscompladd function of the...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0 <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0 <=33.0.0) +2 more potentially affected by CVE-2022-2421 via socket.io-parser (=3.4.1)

socket.io-parser NPM version =3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2022-2421 Source...

Fedora: Security Advisory for ckeditor (FEDORA-2022-b61dfd219b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: ckeditor-4.20.0-1.fc36

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

The vulnerability of the “Text Editor” module of the Beaver Builder plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the “Text Editor” module of the Beaver Builder plugin for WordPress content management systems exists due to the lack of protective measures for website page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the did_set_string_option() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the didsetstringoption function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure by opening a specially created file...

[SECURITY] Fedora 36 Update: gitqlient-1.5.0-2.fc36

GitQlient, pronounced as git+client /g=EF=BF=BD=EF=BF=BDt=EF=BF=BD=EF=BF=BDk la=EF=BF=BD=EF=BF=BD=EF=BF=BD=EF=BF=BDnt/ is a multi-platform Git client originally forked from QGit. Nowadays it goes beyond of just a fork and adds a lot of new functionality. Some of the major feature you can find are...

Vim buffer overflow vulnerability (CNVD-2022-66763)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in versions of Vim prior to 9.0.0598, which stems from a boundary error in winredrruler in drawscreen.c:799 when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

ROS-20220926-01

A vulnerability in the Vim text editor is related to a boundary error in the utfcptr2len function in mbyte. Exploitation of the vulnerability could allow an attacker acting remotely to trick the victim into to open a specially crafted file, cause a heap buffer overflow, and execute arbitrary code...

The vulnerability in the src/undo.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the src/undo.c component of the Vim text editor lies in the fact that “undo” leaves the end of the visual area at the end of the line. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failur...

The vulnerability of the spell_iswordp() function in the spell.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...

Vim Resource Management Error Vulnerability (CNVD-2022-68078)

Vim is a cross-platform text editor. versions prior to Vim 9.0.0490 are vulnerable to a resource management error, which stems from the existence of a memory reuse after release issue. No detailed vulnerability details are currently available...