Lucene search
+L

33 matches found

Prion
Prion
•added 2021/04/05 8:15 a.m.•25 views

Cross site scripting

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

6.8CVSS9AI score0.02751EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/04/05 7:32 a.m.•63 views

CVE-2021-29996

Mark Text

9.6CVSS9.1AI score0.02751EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/05 7:32 a.m.•31 views

CVE-2021-29996

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

9.3AI score0.02751EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/04/05 12:00 a.m.•17 views

Mark Text 跨站脚本漏洞

Mark Text is a high-performance Markdown editor, built on Electron and running on Mac, Windows and Linux platforms, with a clean look and a focus on speed and usability. A cross-site scripting vulnerability exists in Mark Text in version 0.16.3 and earlier, which is related to the failure of the...

9.6CVSS5.5AI score0.02751EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/05 12:00 a.m.•8 views

CVE-2021-29996: Improper Neutralization of Input During Web Page Generation

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution RCE by opening .md files containing a mutation Cross Site Scripting XSS payload...

9.6CVSS6AI score0.02751EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/10/21 12:00 a.m.•13 views

Mark Text Cross-Site Scripting Vulnerability

Mark Text is an Electron-based Markdown editor for individual developers. A cross-site scripting vulnerability exists in Mark Text version 0.16.2, which can be exploited by an attacker to cause remote code execution...

9.6CVSS7.3AI score0.01884EPSS
SaveExploits1References1
OSV
OSV
•added 2020/10/16 5:15 a.m.•36 views

CVE-2020-27176

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

9.6CVSS6.3AI score
SaveExploits0References1
NVD
NVD
•added 2020/10/16 5:15 a.m.•34 views

CVE-2020-27176

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

9.6CVSS0.01884EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/10/16 5:15 a.m.•9 views

CVE-2020-27176

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

9.6CVSS5.5AI score0.04881EPSS
SaveExploits2References2
Prion
Prion
•added 2020/10/16 5:15 a.m.•34 views

Design/Logic Flaw

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

6.8CVSS6.2AI score0.04881EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2020/10/16 4:28 a.m.•50 views

CVE-2020-27176

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

8.3CVSS6.4AI score0.01884EPSS
SaveExploits1References1
CVE
CVE
•added 2020/10/16 4:28 a.m.•93 views

CVE-2020-27176

Technical details about CVE-2020-27176 are not publicly available in the provided connected documents. Monitor for updates. The set includes related items (e.g., CVE-2020-26870) but no concrete product/version/impact information for this CVE here.

9.6CVSS6.3AI score0.01884EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•5 views

CVE-2020-27176: Improper Neutralization of Input During Web Page Generation

Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the "source code mode" feature, which parses HTML even though HTML support is not one of...

9.6CVSS5.8AI score0.01884EPSS
SaveExploits1References2
Rows per page
Query Builder