Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:19 p.m.0 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS6.3AI score0.00209EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:30 p.m.2 views

CVE-2020-22612

Installer RCE on settings file write in MyBB before 1.8.22...

9.8CVSS7AI score0.0011EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:11 a.m.6 views

CVE-2019-15643

The ultimate-faqs plugin before 1.8.22 for WordPress has XSS...

6.1CVSS7.1AI score0.0019EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.2 views

gRPC Security Vulnerabilities

gRPC is a modern, open-source, high-performance remote procedure call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC versions prior to 1.10.9, 1.9.15, and 1.8.22, which stems from the ability to allocate memory far beyond the configuration limit for incoming messages...

5.3CVSS6.8AI score0.00283EPSS
Exploits0References5
OSV
OSV
added 2022/09/09 7:15 p.m.1 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.9AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/09 7:15 p.m.1 views

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

5.4CVSS5.9AI score0.00209EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.3 views

PT-2022-24496 · Unknown · Markdown-Nice

Name of the Vulnerable Software and Affected Versions: Markdown-Nice version 1.8.22 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field. Recommendations: For Markdown-Nice version...

5.4CVSS5.5AI score0.00209EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.1 views

Markdown-Nice 跨站脚本漏洞

Markdown-Nice is an open source Markdown editor that supports theme design by inkdrop software mdnice. A security vulnerability exists in Markdown-Nice v1.8.22 that stems from the presence of cross-site scripting XSS, which allows an attacker to execute arbitrary web script or HTML via a speciall...

5.4CVSS5.8AI score0.00209EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/06/06 12:0 a.m.24 views

Debian: Security Advisory (DLA-2235-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.1AI score0.00086EPSS
Exploits1References3
CNVD
CNVD
added 2020/01/03 12:0 a.m.1 views

MyBB Open Redirect Vulnerability

MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB versions prior to 1.8.22. The vulnerability can be exploited t...

6.1CVSS6.8AI score0.00236EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/11/07 12:0 a.m.32 views

openSUSE Security Update : dbus-1 (openSUSE-2016-1269)

This update for dbus-1 to version 1.8.22 fixes several issues. This security issue was fixed : - boo1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. These non-security issues were fixed : - boo978477: Correctly reset timeouts for pending fi...

1.9CVSS6.7AI score0.00092EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2016/10/25 12:0 a.m.11 views

openSUSE Security Update : dbus-1 (openSUSE-2016-1222)

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed : - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included : - Change the default...

5.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/10/24 12:0 a.m.13 views

openSUSE Security Update : dbus-1 (openSUSE-2016-1206)

This update for dbus-1 to version 1.8.22 fixes several issues. This security issue was fixed : - boo1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. These non-security issues were fixed : - boo978477: Correctly reset timeouts for pending fi...

5.6AI score
Exploits0References3
OpenVAS
OpenVAS
added 2015/01/23 12:0 a.m.19 views

Zabbix Multiple SQLi Vulnerabilities (Jan 2015)

Zabbix is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

7.5CVSS7.8AI score0.00458EPSS
Exploits0References4
Rows per page
Query Builder