CVE search results

11 – 20 of 32 results

Detailed view

Sort by:

CVE-2022-24728

Medium priority

Needs evaluation

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability...

4 affected packages

ckeditor, ckeditor3, ldap-account-manager, request-tracker4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ckeditor3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Ignored
ldap-account-manager	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
request-tracker4	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-41165

Medium priority

Needs evaluation

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject...

4 affected packages

ckeditor, ckeditor3, ldap-account-manager, request-tracker4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ckeditor3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Ignored
ldap-account-manager	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
request-tracker4	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-41164

Medium priority

Needs evaluation

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to...

4 affected packages

ckeditor, ckeditor3, ldap-account-manager, request-tracker4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ckeditor3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Ignored
ldap-account-manager	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
request-tracker4	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-37695

Medium priority

Some fixes available 4 of 34

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed...

4 affected packages

ckeditor, ckeditor3, ldap-account-manager, request-tracker4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Not affected	Fixed	Fixed	Fixed
ckeditor3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Ignored
ldap-account-manager	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
request-tracker4	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-32809

Medium priority

Some fixes available 4 of 5

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to...

1 affected packages

ckeditor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	—	Not affected	Fixed	Fixed	Fixed

CVE-2021-32808

Medium priority

Some fixes available 1 of 2

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse...

1 affected packages

ckeditor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	—	Not affected	Not affected	Not affected	Not affected

CVE-2021-33829

Medium priority

Some fixes available 3 of 5

A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.

1 affected packages

ckeditor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	—	Not affected	Fixed	Fixed	Fixed

CVE-2021-21391

Medium priority

Needs evaluation

CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm,...

2 affected packages

ckeditor, ckeditor3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Not affected	Not affected	Not affected	Not affected
ckeditor3	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Not in release

CVE-2021-26272

Medium priority

Some fixes available 1 of 6

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

1 affected packages

ckeditor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2021-26271

Medium priority

Some fixes available 1 of 6

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

1 affected packages

ckeditor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
ckeditor	Not affected	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

Export to JSON

Results by page:

Search CVE reports