Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/05/15 12:0 a.m.5 views

anote 跨站脚本漏洞

Anote is an open-source note-taking application that supports Markdown format. Version 1.0 of Anote contains a cross-site scripting vulnerability. This vulnerability stems from a persistent cross-site scripting issue, which could allow attackers to execute arbitrary code by injecting malicious...

7.2CVSS6AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/16 7:9 p.m.20 views

CVE-2021-47840 Moeditor 0.2.0 - Persistent Cross-Site Scripting

Moeditor 0.2.0 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads within markdown files. Attackers can upload specially crafted markdown files with embedded JavaScript that execute when opened, potentially enabling remote code execution on t...

7.2CVSS0.00042EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/16 7:9 p.m.3 views

CVE-2021-47838 Markright 1.0 - Persistent Cross-Site Scripting

Markright 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to embed malicious payloads in markdown files. Attackers can upload specially crafted markdown files that execute arbitrary JavaScript when opened, potentially enabling remote code execution on the victim...

7.2CVSS7.3AI score0.00042EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Markright security vulnerability

Markright is a Markdown editor developed by David as an individual project. Version 1.0 of Markright has a security vulnerability; this vulnerability stems from allowing the embedding of malicious payloads within Markdown files, which could lead to remote code execution...

7.2CVSS6.1AI score0.00042EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-44031

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.04708EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/13 5:26 p.m.6 views

CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 13.2 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to create a denial of service condition by sending specially crafted markdown payloads to the Wiki feature...

6.5CVSS0.00244EPSS
Exploits0References2
Rows per page
Query Builder