Lucene search
+L

422 matches found

Cvelist
Cvelist
added 2022/02/18 2:50 p.m.41 views

CVE-2022-23647 Cross-site Scripting in Prism

Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leading to the input text being inserted int...

7.5CVSS7.5AI score0.01479EPSS
Exploits0References3
OSV
OSV
added 2022/02/18 2:50 p.m.26 views

CVE-2022-23647 Cross-site Scripting in Prism

Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leading to the input text being inserted int...

7.5CVSS7AI score0.01479EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2022/02/18 2:50 p.m.88 views

CVE-2022-23647

Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leading to the input text being inserted int...

7.5CVSS7AI score0.01479EPSS
Exploits0
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.4 views

Prism 跨站脚本漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prism suffers from a cross-site scripting vulnerability that stems from the command line plugin not properly escaping its output, causing input text to be inserted...

7.5CVSS6.9AI score0.01479EPSS
Exploits0References10
Veeam
Veeam
added 2021/12/31 12:0 a.m.20 views

"Mine with Veeam" dashboard is not listed in Prism dropdown

End-of-Life Product Nutanix Mine with Veeam reached End-of-Life on 2026-04-30. As of this date, all support services for this product are unavailable. For more information, see the Nutanix EOL Announcement Bulletin - Nutanix Mine, released 2025-04-30. Article Applicability This article is relevan...

5.5AI score
Exploits0
Typo3
Typo3
added 2021/11/10 12:0 a.m.14 views

Denial of Service in extension "Code Highlight" (codehighlight)

The extension bundles a vulnerable version of the 3rd party JavaScript component “prism” which is known to be vulnerable against Regular expression Denial of Service ReDoS...

6.8AI score
Exploits0Affected Software1
Kitploit
Kitploit
added 2021/09/26 8:30 p.m.20 views

JadedWraith - Light-weight UNIX Backdoor

Lightweight UNIX backdoor for ethical hacking. Useful for red team engagements and CTFs. Something I wrote a few years ago as part of a game I was playing with a friend to try to backdoor as many VMs in each other's labs without being caught or having our tools reverse engineered/signatured...

8.1AI score
Exploits0References2
OSV
OSV
added 2021/09/20 8:44 p.m.40 views

GHSA-HQHP-5P83-HX96 prismjs Regular Expression Denial of Service vulnerability

Prism is a syntax highlighting library. The prismjs package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted HTML comment as input may cause an application to consume an excessive amount of CPU...

6.5CVSS6.2AI score0.01045EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.9 views

The vulnerability of the Prism syntax extraction tool, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Prism syntax extraction tool is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.1CVSS7AI score0.01433EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2021/09/16 6:11 a.m.59 views

Regular Expression Denial Of Service (ReDoS)

prism is vulnerable to regular expression denial of service. An attacker is able to send a malicious input string,leading to an intensive usage of CPU and an application crash...

6.5CVSS4.2AI score0.01045EPSS
Exploits1References3Affected Software3
NVD
NVD
added 2021/09/15 1:15 p.m.15 views

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS0.01045EPSS
Exploits1References2
OSV
OSV
added 2021/09/15 1:15 p.m.16 views

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

6.5CVSS6.6AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/09/15 1:15 p.m.23 views

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.9AI score0.01045EPSS
Exploits1References3
Prion
Prion
added 2021/09/15 1:15 p.m.14 views

Design/Logic Flaw

prism is vulnerable to Inefficient Regular Expression Complexity...

4.3CVSS6.4AI score0.01045EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/15 1:15 p.m.4 views

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.8AI score0.01045EPSS
Exploits1References3
OSV
OSV
added 2021/09/15 1:15 p.m.4 views

UBUNTU-CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.9AI score0.01045EPSS
Exploits1References4
Cvelist
Cvelist
added 2021/09/15 12:40 p.m.21 views

CVE-2021-3801 Inefficient Regular Expression Complexity in prismjs/prism

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.9AI score0.01045EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/09/15 12:40 p.m.33 views

CVE-2021-3801

prism is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.7AI score0.01045EPSS
Exploits1
CNNVD
CNNVD
added 2021/09/15 12:0 a.m.5 views

Prism 安全漏洞

Prism is an application from the US-based individual developers of Prism. It is a lightweight, extensible syntax highlighting tool. Prism suffers from a security vulnerability that stems from Prism's susceptibility to inefficient regular expression complexity...

7.5CVSS7AI score0.01045EPSS
Exploits1References4
HackRead
HackRead
added 2021/08/26 5:48 p.m.32 views

New variant of PRISM Backdoor ‘WaterDrop’ targets Linux systems

By Deeba Ahmed According to researchers, the PRISM backdoor has been on their radar for more than 3.5 years. This is a post from HackRead.com Read the original post: New variant of PRISM Backdoor WaterDrop targets Linux systems...

4.1AI score
Exploits0
Rows per page
Query Builder