Lucene search
+L

393 matches found

osv_ghsa
osv_ghsa
•added 2023/02/23 12:30 a.m.•90 views

GHSA-VRJV-MXR7-VJF8 markdown-it-py Denial of Service vulnerability

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

7.1CVSS4.3AI score0.00227EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/02/23 12:30 a.m.•52 views

markdown-it-py Denial of Service vulnerability

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS5.4AI score0.00227EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2023/02/23 12:15 a.m.•9 views

CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS5.9AI score0.00227EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/23 12:15 a.m.•23 views

Input validation

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

1.7CVSS5.3AI score0.00227EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2023/02/23 12:15 a.m.•14 views

PYSEC-2023-24

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS6.8AI score0.00227EPSS
SaveExploits0References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/02/23 12:15 a.m.•15 views

UBUNTU-CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS5.8AI score0.00227EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/22 11:44 p.m.•50 views

CVE-2023-26303 markdown-it-py crash on null assertions

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

3.3CVSS5.5AI score0.00227EPSS
SaveExploits0References1
Mend
Mend
•added 2023/02/22 11:44 p.m.•9 views

CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS0.00227EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2023/02/22 11:44 p.m.•7 views

CVE-2023-26303 markdown-it-py crash on null assertions

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

3.3CVSS5.5AI score0.00227EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/02/22 11:44 p.m.•31 views

CVE-2023-26303 markdown-it-py crash on null assertions

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

3.3CVSS6.1AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2023/02/22 11:44 p.m.•71 views

CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS5.3AI score0.00227EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/02/22 12:00 a.m.•23 views

markdown-it-py security vulnerability

markdown-it-py is a Markdown parser open-sourced by Executable Books. A security vulnerability exists in markdown-it-py versions prior to v2.2.0, which stems from a denial of service that may result if an attacker is allowed to force null assertions using specially crafted input...

5.5CVSS5.7AI score0.00227EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/22 12:00 a.m.•3 views

CVE-2023-26303: Improper Handling of Alternate Encoding

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

5.5CVSS5.7AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/02/22 12:00 a.m.•21 views

PT-2023-20601

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description A denial of service could be caused if an attacker is allowed to force null assertions with specially crafted input. Recommendations For versions prior to 2.2.0, update to version 2.2.0 or lat...

7.1CVSS5.5AI score0.00227EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2023/02/15 6:05 a.m.•12 views

SUSE CVE-2009-0478

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in 1 HttpMsg.c and 2 HttpStatusLine.c...

5CVSS6.8AI score0.71986EPSS
SaveExploits8References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:35 a.m.•17 views

SUSE CVE-2013-4558

The getparentresource function in repos.c in moddavsvn Apache HTTPD server module in Subversion 1.7.11 through 1.7.13 and 1.8.1 through 1.8.4, when built with assertions enabled and SVNAutoversioning is enabled, allows remote attackers to cause a denial of service assertion failure and Apache...

3.5CVSS6.9AI score0.05882EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:58 a.m.•9 views

SUSE CVE-2016-7420

Crypto++ aka cryptopp through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory...

5.9CVSS9AI score0.0199EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:45 a.m.•15 views

SUSE CVE-2021-23970

Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox 86...

6.5CVSS8.5AI score0.01007EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/12/28 3:30 a.m.•33 views

shiyanhui/dht vulnerable to Uncontrolled Resource Consumption

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...

7.5CVSS7.1AI score0.00808EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2022/12/28 3:30 a.m.•39 views

GHSA-P6FG-723F-HGPW shiyanhui/dht vulnerable to Uncontrolled Resource Consumption

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector...

7.5CVSS7.3AI score0.00808EPSS
SaveExploits1References4
Rows per page
Query Builder