Lucene search
+L

296 matches found

Fedora
Fedora
added 2021/11/10 2:56 a.m.42 views

[SECURITY] Fedora 35 Update: vim-8.2.3582-1.fc35

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

7.8CVSS7.8AI score0.01589EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2021/10/30 12:00 a.m.26 views

Fedora: Security Advisory for vim (FEDORA-2021-6988830606)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8AI score0.01736EPSS
SaveExploits3References2
Fedora
Fedora
added 2021/09/15 6:20 p.m.31 views

[SECURITY] Fedora 33 Update: vim-8.2.3404-1.fc33

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

8.6CVSS2.6AI score0.00735EPSS
SaveExploits1
OSV
OSV
added 2021/08/23 7:40 p.m.41 views

GHSA-6226-H7FF-CH6C Widget feature vulnerability allowing to execute JavaScript code using undo functionality

Affected packages The vulnerability has been discovered in Widget plugin if used alongside Undo feature. Impact A potential vulnerability has been discovered in CKEditor 4 Widget package. The vulnerability allowed to abuse undo functionality using malformed widget HTML, which could result in...

7.6CVSS6.2AI score0.01192EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2021/08/23 7:40 p.m.69 views

Widget feature vulnerability allowing to execute JavaScript code using undo functionality

Affected packages The vulnerability has been discovered in Widget plugin if used alongside Undo feature. Impact A potential vulnerability has been discovered in CKEditor 4 Widget package. The vulnerability allowed to abuse undo functionality using malformed widget HTML, which could result in...

7.6CVSS1.7AI score0.01192EPSS
SaveExploits0References9Affected Software1
RubySec
RubySec
added 2021/08/23 12:00 a.m.10 views

Widget feature vulnerability allowing to execute JavaScript code using undo functionality

Affected packages The vulnerability has been discovered in Widget plugin if used alongside Undo feature. Impact A potential vulnerability has been discovered in CKEditor 4 Widget package. The vulnerability allowed to abuse undo functionality using malformed widget HTML, which could result in...

7.6CVSS7AI score0.01192EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/08/12 5:15 p.m.23 views

CVE-2021-32808

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...

7.6CVSS0.01192EPSS
SaveExploits0References7
OSV
OSV
added 2021/08/12 5:15 p.m.2 views

DEBIAN-CVE-2021-32808

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...

5.4CVSS6.2AI score0.01192EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/12 5:15 p.m.6 views

UBUNTU-CVE-2021-32808

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...

7.6CVSS6.6AI score0.01192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/08/12 4:25 p.m.105 views

CVE-2021-32808 Cross-site scripting in ckeditor via abuse of undo functionality

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing...

7.6CVSS6.8AI score0.01192EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/08/12 12:00 a.m.9 views

CKEditor 跨站脚本漏洞

CKEditor is an open source, web-based text editor. A cross-site scripting vulnerability exists in ckeditor that allows a user to abuse the undo function using malformed HTML, which could lead to the execution of JavaScript code...

7.6CVSS6.4AI score0.01192EPSS
SaveExploits0References13
Github Security Blog
Github Security Blog
added 2021/06/15 3:49 p.m.61 views

The Fuck Arbitrary File Deletion via Path Traversal

The thefuck aka The Fuck is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...

9.1CVSS8.8AI score0.01847EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2021/06/15 3:49 p.m.29 views

GHSA-8WWF-2644-F8X4 The Fuck Arbitrary File Deletion via Path Traversal

The thefuck aka The Fuck is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature...

9.1CVSS9.1AI score0.01847EPSS
SaveExploits0References8
CNVD
CNVD
added 2021/06/11 12:00 a.m.47 views

thefuck path traversal vulnerability

thefuck is an open source application. Corrects errors in previous console commands. A path traversal vulnerability exists in thefuck, which can be exploited to arbitrarily delete files via the "undo archive operation" feature...

9.1CVSS6.5AI score0.01847EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/10 11:15 a.m.4 views

DEBIAN-CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS8.5AI score0.01847EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/10 11:15 a.m.17 views

CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS0.01847EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/06/10 11:15 a.m.30 views

CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS7.2AI score0.01847EPSS
SaveExploits0References6
Prion
Prion
added 2021/06/10 11:15 a.m.18 views

Path traversal

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

6.4CVSS9.2AI score0.01847EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2021/06/10 11:15 a.m.17 views

UBUNTU-CVE-2021-34363

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS5.9AI score0.01847EPSS
SaveExploits0References7
OSV
OSV
added 2021/06/10 11:15 a.m.21 views

PYSEC-2021-97

The thefuck aka The Fuck package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature...

9.1CVSS4.9AI score0.01847EPSS
SaveExploits0References4
Rows per page
Query Builder