PT-2024-38546

Name of the Vulnerable Software and Affected Versions: yzane vscode-markdown-pdf version 1.5.0 Description: A problematic issue has been found in the Markdown File Handler component, leading to pathname traversal. The manipulation requires a local attack. The exploit has been disclosed to the...

CVE-2024-7738: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. The manipulation leads to pathname traversal. Attacking locally is a requirement. The exploit has...

CVE-2024-31783

Cross Site Scripting XSS vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation...

CVE-2024-31783: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation...

Typora 跨站脚本漏洞

Typora is an editor. A cross-site scripting vulnerability exists in Typora v.1.6.7 and earlier versions, which originates from a vulnerability that allows a local attacker to obtain sensitive information via a crafted script during the creation of a Markdown file...

CVE-2024-31783

A Cross-Site Scripting (XSS) vulnerability exists in Typora version 1.6.7 and earlier . The flaw occurs during the creation of a markdown file, where a local attacker can execute a crafted script to obtain sensitive information . No specific patch version or remediation is currently provided in t...

CVE-2024-31783

Cross Site Scripting XSS vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script during markdown file creation...

PT-2024-24204 · Typora · Typora

Name of the Vulnerable Software and Affected Versions: Typora versions 1.6.7 and earlier Description: A Cross Site Scripting XSS issue allows a local attacker to obtain sensitive information via a crafted script during markdown file creation. This occurs when a local attacker crafts a script that...

Cross-Site Scripting

jupyterlab is vulnerable to Cross-Site Scripting. The vulnerability is due to there is no sanitization and escaping for markdown content, specifically in the Table of Contents extension. This allows an attacker to execute malicious scripts when a user previewed a markdown file...

Security feature bypass

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the...

CVE-2024-22420: Improper Neutralization of Input During Web Page Generation

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the...

CVE-2023-44141

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file...

CVE-2023-44141

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file...

Code injection

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file...

CVE-2023-44141

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file...

PT-2023-29126 · Inkdrop · Inkdrop

Name of the Vulnerable Software and Affected Versions: Inkdrop versions prior to 5.6.0 Description: The issue allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file. Recommendations: For versions prior to 5.6.0, update to...

CVE-2023-44141: Improper Control of Generation of Code

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file...

SUSE CVE-2023-5701

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

CVE-2023-5701

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

Cross site scripting

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...