6114 matches found
OSV-2021-446 Global-buffer-overflow in AK::StringView::operator==
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31351 Crash type: Global-buffer-overflow READ 1 Crash state: AK::StringView::operator== Markdown::CodeBlock::parse bool Markdown::helper...
OSV-2021-445 Global-buffer-overflow in AK::StringView::operator==
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31338 Crash type: Global-buffer-overflow READ 1 Crash state: AK::StringView::operator== = Markdown::Table::parse...
PT-2021-28118
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash occurs in the AK::StringView::operator== function, which is called by...
PT-2021-28117
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves the AK::StringView::operator== and...
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
Code injection
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
CVE-2020-27224
The CVE-2020-27224 entry affects Eclipse Theia up to version 1.2.0, specifically the Markdown Preview module (@theia/preview). The issue enables arbitrary code execution due to a failure in how external data is processed during code segment construction in the Markdown Preview, leading to a code ...
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
serenity:FuzzMarkdown: Global-buffer-overflow in AK::StringView::operator==
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5630927108702208 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzMarkdown Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...
serenity:FuzzMarkdown: Global-buffer-overflow in AK::StringView::operator==
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4840719661531136 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzMarkdown Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...
CVE-2020-27224: Improper Neutralization of Input During Web Page Generation
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
Regular Expression Denial of Service
Overview In affected versions of @ckeditor/ckeditor5-markdown-gfm a regular expression denial of service ReDoS vulnerability has been discovered. Impact The vulnerability allowed to abuse a link recognition regular expression, which could cause a significant performance drop resulting in a browse...
note-mark
Note Mark !License: AGPL V3https://img.shields.io/github/li...
CVE-2020-28493
A flaw was found in python-jinja2. The ReDOS vulnerability of the regex is mainly due to the sub-pattern a-zA-Z0-9.-+.a-zA-Z0-9.-+. This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory...
@stoplight/markdown-viewer (>=3.1.0, <=3.3.0) potentially affected by unknown CVE via @stoplight/markdown (2.2.3)
@stoplight/markdown NPM version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on @stoplight/markdown and may be impacted: - @stoplight/markdown-viewer =3.1.0, =3.3.0 Source cves: unknown CVE Source advisory: SNYK:JS-STOPLIGHTMARKDOWN-1078260...
Cross-site Scripting (XSS)
Overview @stoplight/markdown is an Useful functions when working with Markdown. Leverages the Unified / Remark ecosystem under the hood. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It is possible to inject malicious JavaScript as part of the markdown feature of...
CVE-2020-8031
A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prio...
DEBIAN-CVE-2020-8031
A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prio...
Cross site scripting
A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prio...