10 matches found
pt-esign__Damn-vulnerable-sca
SCA Goat Navigating SCA Vulnerabilities, Empowering Mastery...
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Marked (CVE-2017-1000427)
Summary Marked is used by a third party component that is used in IBM InfoSphere Information Server. A vulnerability in Marked was addressed. Vulnerability Details CVEID: CVE-2017-1000427 DESCRIPTION: Marked is vulnerable to cross-site scripting, caused by improper validation of user-supplied inp...
Fedora 32 : marked (2020-d714c08261)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-d714c08261 advisory. New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs- marked. I tested upgrades from both, but m...
Fedora 31 : marked (2020-5eca570e16)
The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2020-5eca570e16 advisory. New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs- marked. I tested upgrades from both, but m...
@absinthe/graphiql-workspace (>=1.1.4, <=1.1.5), @agilys/custom-graphiql (>=2.0.0-beta1, <=2.0.3) +1303 more potentially affected by CVE-2017-1000427 via marked (>=0.0.1, <=0.3.6)
marked NPM version =0.0.1, =1.1.4, =2.0.0-beta1, =1.0.1, =0.25.0, =0.0.0-development, =3.3.1, =0.0.1, =0.0.0, =0.0.3 and more Source cves: CVE-2017-1000427 Source advisory: OSV:GHSA-7PX7-7XJX-HXM8...
CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
DEBIAN-CVE-2017-1000427
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser...
CVE-2017-1000427
CVE-2017-1000427: Marked up to version 0.3.6 and earlier is vulnerable to cross-site scripting via the data: URI parser. This is an XSS in user-supplied input that can execute script in the victim’s browser when a crafted URL is clicked. The NVD shows CVSS v3.0 base score 6.1 (network, low attack...
