5696 matches found
CVE-2022-40274
Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled...
CVE-2022-40274
Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled...
PT-2022-25313 · Gridea · Gridea
Name of the Vulnerable Software and Affected Versions: Gridea version 0.9.3 Description: The issue allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the...
PT-2022-25315 · Joplin · Joplin
Name of the Vulnerable Software and Affected Versions: Joplin version 2.8.8 Description: The issue allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properl...
CVE-2022-40277: Improper Input Validation
Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before...
CVE-2022-40274: Improper Control of Generation of Code
Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enabled...
SUSE-SU-2022:3425-1 Security update for grafana
This update for grafana fixes the following issues: Updated to version 7.5.12: - CVE-2021-43813: Fixed markdown path traversal bsc1193688. - CVE-2021-39226: Fixed Snapshot authentication bypass bsc1191454...
OESA-2022-1929 grafana security update
Security Fixes: Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot...
CVE-2022-41220
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
Stack overflow
DISPUTED md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
CVE-2022-41220
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
CVE-2022-41220
CVE-2022-41220 : Red Hat and third‑party sources identify a stack‑based buffer overflow in md2roff 1.9 triggered by processing a Markdown file. The Red Hat entries and related postings confirm this vulnerability is separate from CVE-2022-34913. The exploit demonstrations show an out‑of‑bounds/sta...
CVE-2022-41220: Out-of-bounds Write
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
md2roff 缓冲区错误漏洞
md2roff is a personal developer by Nicholas Christopoulos that converts markdown to groff / troff man, mdoc, mm, mom documents. A buffer error vulnerability exists in md2roff version 1.9, which is caused by a stack-based buffer overflow in Markdown files...
PT-2022-25737 · Md2Roff · Md2Roff
Name of the Vulnerable Software and Affected Versions: md2roff version 1.9 Description: The issue is a stack-based buffer overflow that can occur when processing a Markdown file. It's noted that the vendor considers the product not intended for untrusted input. Recommendations: For md2roff versio...
Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...
GHSA-462R-WXVM-JVXH Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...
CVE-2022-38639
A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...
