CVE-2018-10361

An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauthktexteditorhelper service as utilized in the Kate text editor can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one use...

CVE-2018-10361

CVE-2018-10361 affects KTextEditor 5.34.0 through 5.45.0 (used by Kate). Insecure handling of temporary files in the kauth_ktexteditor_helper service can let an unprivileged local user gain root privileges via a symlink attack when writing a file into another user’s directory. Impact is local pri...

CVE-2018-2821

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2821

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2821

The CVE-2018-2821 entry concerns Oracle PeopleSoft, specifically the Rich Text Editor within the PeopleTools component. Affected versions are 8.54, 8.55 and 8.56. The vulnerability is exploitable over HTTP by an unauthenticated, network-connected attacker and requires user interaction. Successful...

CVE-2018-2772

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2821

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Rich Text Editor. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2772

CVE-2018-2772 affects Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor in versions 8.54–8.56. The vulnerability permits a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools and can lead to a full takeover. CVSS v3.0 base score is 8.8 (Hig...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08454)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-08452)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the Rich Text Editor component in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the...

Solaris 10 (sparc) : 120286-03

GNOME 2.6.0: Gnome text editor Patch. Date this patch was last updated by Sun : Jun/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Solaris 10 (x86) : 143740-01

SunOS 5.10x86: Gedit patch. Date this patch was last updated by Sun : May/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 120287-03

GNOME 2.6.0x86: Gnome text editor Patch. Date this patch was last updated by Sun : Jun/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerabilities of the Microsoft Office Compatibility Pack, Office Online Server, Microsoft Office Web Apps, Word Viewer and Microsoft Excel Web App, SharePoint applications, Microsoft Word text editor, and Word Automation Services are related to improper handling of objects in memory...

[SECURITY] Fedora 25 Update: emacs-25.3-3.fc25

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

[SECURITY] Fedora 26 Update: emacs-25.3-3.fc26

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

libgedit.a 3.22.1 Denial Of Service Vulnerability

Exploit for linux platform in category dos / poc whom it may concern, Title: libgedit.a mishandeling NUL blocks in geditGNOME text editor | Denial of service CVE: CVE-2017-14108 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://gnome.org , https://wiki.gnome.org/Apps/Gedit Versi...

Arbitrary File Deletion

Moodle is vulnerable to arbitrary file deletion. Authenticated attackers can delete arbitrary files through the manage-files button in a text editor because it does not consider the mod/wiki:managefiles capability...

The vulnerability of the Skype messaging service allows a hacker to trigger a service failure.

The vulnerability of the Skype instant messaging application arises from errors in the MSFTEDIT.dll library, which cause buffer overflows on the stack. Exploiting this vulnerability allows an attacker to cause a service failure in the application by copying a specially crafted image file into the...