UBUNTU-CVE-2021-30027

mdanalyzeline in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document...

PT-2020-16226 · Peg · Peg-Markdown

Name of the Vulnerable Software and Affected Versions: peg-markdown version 0.4.14 Description: The issue is related to a NULL pointer dereference in the process raw blocks function located in markdown lib.c. This problem only affects products that are no longer supported by the maintainer...

CVE-2019-20871

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking...

CVE-2019-20871

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking...

Code injection

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking...

CVE-2019-20871

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking...

CVE-2019-20871

Mattermost Server contains a vulnerability (CVE-2019-20871) in the Markdown rendering path affecting Mattermost Server releases prior to 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The issue is due to the Markdown library allowing catastrophic backtracking. The provided connected documents do not specify a ...

DEBIAN-CVE-2020-11888

python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...

CVE-2019-9736

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

DISCOUNT Denial of Service Vulnerability

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'quoteblock' function of the markdown.c file of the libmarkdown.a static link library in DISCOUNT. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buffer...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10642)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'mkdtrimline' function in the mkdio.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...

DISCOUNT Denial of Service Vulnerability (CNVD-2018-10852)

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'isfootnote' function in the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based...

DISCOUNT Denial of Service Vulnerability

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'islist' function of the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buff...

UBUNTU-CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

DEBIAN-CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

UBUNTU-CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...