Lucene search
+L

4774 matches found

OSV
OSV
added 2022/03/28 6:53 p.m.19 views

CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

3.5CVSS6.3AI score0.00682EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/28 2:15 p.m.4 views

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

6.1CVSS6.9AI score0.00993EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/28 2:15 p.m.14 views

CVE-2021-43721

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

6.1CVSS6.8AI score0.00993EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/28 2:15 p.m.16 views

Cross site scripting

Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...

4.3CVSS6.5AI score0.00993EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/28 12:0 a.m.10 views

PT-2022-13210 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.10 and later Description: An issue has been discovered in GitLab CE/EE where it is possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes. Recommendations: For GitLab CE/EE...

4.3CVSS4AI score0.00682EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/03/27 12:0 a.m.6 views

Marky 注入漏洞

Marky is a Markdown editor by Alessandro Arnodo, a Swiss individual developer. Marky suffers from an injection vulnerability that allows an attacker to execute arbitrary code by injecting a carefully crafted attack payload...

9.8CVSS8.9AI score0.01939EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/03/27 12:0 a.m.11 views

Fedora: Security Advisory for ghostwriter (FEDORA-2022-c42d02e5e5)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.04473EPSS
SaveExploits3References2
Fedora
Fedora
added 2022/03/26 3:51 p.m.25 views

[SECURITY] Fedora 36 Update: ghostwriter-2.1.2-1.fc36

Ghostwriter is a text editor for Markdown, which is a plain text markup format created by John Gruber. For more information about Markdown, please visit John Gruber=EF=BF=BD=EF=BF=BD=EF=BF=BDs website at http://www.daringfir eball.net. Ghostwriter provides a relaxing, distraction-free writing...

9.8CVSS9.2AI score0.04473EPSS
SaveExploits3
Fedora
Fedora
added 2022/03/26 3:51 p.m.25 views

[SECURITY] Fedora 36 Update: ghc-cmark-gfm-0.2.3-1.fc36

This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.3 and does not require prior installation of the C library...

9.8CVSS9.4AI score0.04473EPSS
SaveExploits3
CNVD
CNVD
added 2022/03/23 12:0 a.m.26 views

HexoEditor Cross-Site Scripting Vulnerability (CNVD-2022-25206)

HexoEditor is an open source Markdown a markup language that can be written using a normal text editor editor optimized for Hexo a blogging framework. HexoEditor 1.1.8 contains a cross-site scripting vulnerability that can be exploited to place a common cross-site scripting payload into a...

6.1CVSS0.7AI score0.0073EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.15 views

Fedora: Security Advisory for ghc-cmark-gfm (FEDORA-2022-bc43bafcfd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.04473EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.21 views

Fedora: Security Advisory for ghostwriter (FEDORA-2022-725edc74c0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.04473EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2022/03/23 12:0 a.m.16 views

Fedora: Security Advisory for ghostwriter (FEDORA-2022-557ad15f2e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.04473EPSS
SaveExploits3References2
Fedora
Fedora
added 2022/03/22 3:44 a.m.19 views

[SECURITY] Fedora 35 Update: ghostwriter-2.1.2-1.fc35

Ghostwriter is a text editor for Markdown, which is a plain text markup format created by John Gruber. For more information about Markdown, please visit John Gruber=EF=BF=BD=EF=BF=BD=EF=BF=BDs website at http://www.daringfir eball.net. Ghostwriter provides a relaxing, distraction-free writing...

9.8CVSS9.2AI score0.04473EPSS
SaveExploits3
Fedora
Fedora
added 2022/03/22 3:44 a.m.21 views

[SECURITY] Fedora 35 Update: ghc-cmark-gfm-0.2.3-1.fc35

This package provides Haskell bindings for , the reference parser for , a fully specified variant of Markdown. It includes sources for libcmark-gfm 0.29.0.gfm.3 and does not require prior installation of the C library...

9.8CVSS9.4AI score0.04473EPSS
SaveExploits3
Fedora
Fedora
added 2022/03/22 3:19 a.m.32 views

[SECURITY] Fedora 34 Update: ghostwriter-2.1.2-1.fc34

Ghostwriter is a text editor for Markdown, which is a plain text markup format created by John Gruber. For more information about Markdown, please visit John Gruber=EF=BF=BD=EF=BF=BD=EF=BF=BDs website at http://www.daringfir eball.net. Ghostwriter provides a relaxing, distraction-free writing...

9.8CVSS9.2AI score0.04473EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2022/03/21 11:15 a.m.5 views

CVE-2022-24656

HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...

6.1CVSS6.4AI score0.0073EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/03/21 10:55 a.m.23 views

CVE-2022-24656

HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...

6.1AI score0.0073EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/21 10:55 a.m.16 views

CVE-2022-24656

HexoEditor 1.1.8 is affected by Cross Site Scripting XSS. By putting a common XSS payload in a markdown file, if opened with the app, will execute several times...

6.1CVSS5.9AI score0.0073EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.8 views

HexoEditor 跨站脚本漏洞

HexoEditor is an open source Markdown a markup language that can be written using a normal text editor editor optimized for Hexo a blogging framework. HexoEditor 1.1.8 contains a cross-site scripting vulnerability that can be exploited to place a common cross-site scripting payload into a...

6.1CVSS5.3AI score0.0073EPSS
SaveExploits1References2
Rows per page
Query Builder