287 matches found
[SECURITY] Fedora 30 Update: nodejs-simple-markdown-0.4.4-1.fc30
simple-markdown is a markdown-like parser designed for simplicity and extensibility...
[SECURITY] Fedora 28 Update: php-erusev-parsedown-1.7.1-1.fc28
Markdown parser in PHP. Autoloader: /usr/share/php/erusev/parsedown/autoload.php...
CVE-2018-1000874
DISPUTED PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by...
CVE-2018-1000874
PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a...
CVE-2018-1000874
PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a...
CVE-2018-1000874
PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a...
CVE-2018-1000874
PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting XSS vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a...
PT-2018-9595 · Cebe · Cebe Markdown Parser
Name of the Vulnerable Software and Affected Versions: cebe markdown parser versions 1.2.0 and earlier Description: The issue allows a maliciously crafted script to be executed, potentially resulting in the loss of user data and sensitive user information. This can be exploited by crafting a thre...
Remarkable Cross-Site Scripting Vulnerability
Remarkable is a Markdown a markup language parser. A cross-site scripting vulnerability exists in Remarkable 1.6.2 and earlier versions. A remote attacker can exploit this vulnerability to execute JavaScript code...
CVE-2017-16006
Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...
CVE-2017-16006
The CVE-2017-16006 issue affects remarkable before or equal to v1.6.2, where data: URIs in links can trigger JavaScript execution, enabling cross-site scripting. Impact is client-side, subject to whether the environment allows data: URI handling. Affected component: remarkable’s markdown parser; ...
CVE-2017-16006
Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...
Marked Cross-Site Scripting Vulnerability
marked is an American software developer Christopher Jeffrey developed a Markdown parser and compiler written in JavaScript. A cross-site scripting vulnerability exists in marked 0.3.5 and earlier versions, which stems from the program's failure to properly handle URLs with HTML entities, and can...
UBUNTU-CVE-2016-10531
marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection sanitize: true to inject a javascript: URL. This flaw exists because...
md4c buffer overflow vulnerability (CNVD-2018-15761)
md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdislinkreferencedefinitionhelper' function in version 0.2.5 of md4c, which stems from the program failing to properly handle loop termination. An attacker could use this vulnerability to cause a...
md4c buffer overflow vulnerability (CNVD-2018-15760)
md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdmergelines' function in md4c version 0.2.5. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...
md4c buffer overflow vulnerability (CNVD-2018-15762)
md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdisnamedentitycontents' function in md4c version 0.2.5. An attacker could exploit this vulnerability to cause a heap-based buffer out-of-bounds read...
md4c buffer overflow vulnerability
md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdsplitsimplepairingmark' function in versions of md4c prior to 0.2.5. An attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...