Lucene search
+L

917 matches found

Tenable Nessus
Tenable Nessus
added 2023/10/19 12:00 a.m.42 views

Vim < 9.0.2010 Use-After-Free

Use After Free in GitHub repository vim/vim prior to v9.0.2010. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid183414; scriptversion"1.4";...

7.8CVSS6.7AI score0.00539EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/10/16 12:00 a.m.29 views

Fedora: Security Advisory for emacs (FEDORA-2023-29df561f1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.01639EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/10/14 1:27 a.m.68 views

[SECURITY] Fedora 37 Update: emacs-28.3-0.rc1.fc37

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

9.8CVSS6.8AI score0.01639EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/05 12:00 a.m.6 views

PT-2023-8851 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim versions prior to 20d161ace307e28690229b68584f2d84556f8960 Description: The issue is related to a NULL pointer dereference in the exmode of the vim text editor. Exploitation of this issue may allow an attacker to cause a denial of service...

7.8CVSS6.2AI score0.0119EPSS
SaveExploits13References134
OpenVAS
OpenVAS
added 2023/10/05 12:00 a.m.20 views

Fedora: Security Advisory for ckeditor (FEDORA-2023-79b5902a52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.00725EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/10/04 3:51 p.m.111 views

[SECURITY] Fedora 38 Update: ckeditor-4.22.1-1.fc38

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
Fedora
Fedora
added 2023/10/04 3:49 p.m.42 views

[SECURITY] Fedora 37 Update: ckeditor-4.22.1-1.fc37

CKEditor is a text editor to be used inside web pages. It's a WYSIWYG editor, which means that the text being edited on it looks as similar as possible to the results users have when publishing it. It brings to the web common editing features found on desktop editing applications like Microsoft...

6.1CVSS5.6AI score0.00725EPSS
SaveExploits0
Debian
Debian
added 2023/09/29 1:52 p.m.141 views

[SECURITY] [DLA 3588-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 29, 2023 https://wiki.debian.org/LTS -...

7.8CVSS8.8AI score0.00613EPSS
SaveExploits2
Fedora
Fedora
added 2023/09/28 1:37 a.m.81 views

[SECURITY] Fedora 38 Update: emacs-28.3-0.rc1.fc38

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

9.8CVSS6.8AI score0.01639EPSS
SaveExploits0
NVD
NVD
added 2023/09/25 4:15 p.m.23 views

CVE-2023-4892

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

5.7CVSS5.6AI score0.00385EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/25 4:15 p.m.18 views

Design/Logic Flaw

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

4.9CVSS4.9AI score0.00385EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/09/25 3:55 p.m.30 views

CVE-2023-4892 Teedy v1.11 - Stored cross-site scripting (XSS)

Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp...

5.7CVSS6AI score
SaveExploits0References4
CVE
CVE
added 2023/09/25 3:55 p.m.80 views

CVE-2023-4892

CVE-2023-4892 affects Teedy v1.11, with a cross-site scripting (stored XSS) vulnerability in the text editor that lets attacker-supplied HTML/JS be executed in the web application. Impact stated: ability to run malicious JavaScript within the webapp. Exploitation details are not provided in the c...

5.7CVSS4.9AI score0.00385EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2023/09/22 10:18 a.m.18 views

Cross Site Scripting

xdsoft.net is vulnerable to Cross Site Scripting vulnerability. The vulnerability is due to improper sanitization of user input in the rich text editor component. This can be exploited by the attacker by injecting malicious input to execute Javascript on client side...

6.1CVSS6.7AI score0.00539EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/09/19 6:30 a.m.45 views

Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.1AI score0.00539EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/09/19 6:30 a.m.68 views

GHSA-95XR-CQ6H-VWR3 Jodit Editor vulnerable to cross-site scripting

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00539EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2023/09/19 4:15 a.m.6 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS6.4AI score0.00539EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/19 4:15 a.m.15 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6.1CVSS5.9AI score0.00539EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/09/19 12:00 a.m.12 views

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

6AI score0.00539EPSS
SaveExploits0References2
NVD
NVD
added 2023/09/18 3:15 p.m.46 views

CVE-2023-42371

Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execute arbitrary code via a crafted script to the insert link function in the editor component...

5.4CVSS5.7AI score0.00614EPSS
SaveExploits1References2
Rows per page
Query Builder