PT-2026-68218

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 11.3.6 Progress MarkLogic Server versions prior to 12.0.3 Description An HTTP request smuggling issue exists in the HTTP App Server. This occurs when a crafted HTTP request containing both...

EUVD-2017-11936

Malware in sbrugna...

EUVD-2017-11941

Malware in sbrugna...

EUVD-2017-11940

Malware in sbrugna...

EUVD-2017-11942

Malware in sbrugna...

EUVD-2017-11937

Malware in sbrugna...

EUVD-2017-11935

Malware in sbrugna...

EUVD-2017-11938

Malware in sbrugna...

Malicious code in marklogic-af-test-20220718 (npm)

The package marklogic-af-test-20220718 was found to contain malicious code...

MAL-2025-25955 Malicious code in marklogic-af-test-20220718 (npm)

The package marklogic-af-test-20220718 was found to contain malicious code...

help.marklogic.com Cross Site Scripting vulnerability OBB-3848273

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Antenna House DMC HTMLFilter Memory Corruption (CVE-2017-2799)

A remote code execution vulnerability exists in Marklogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Heap overflow

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2792

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

Heap overflow

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

CVE-2017-2792

AntennaHouse DMC HTMLFilter (used by MarkLogic 8.0-6) contains a heap-based buffer overflow in iBldDirInfo during Compound File Directory Entry parsing. The bug arises while converting Unicode names to SJIS for directory entries; the code increments the Name buffer index (v8) and the loop index (...

CVE-2017-2795

An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide malicious XLS file to trigger this...

CVE-2017-2792

An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTMLFilter used by MarkLogic 8.0-6. A specially crafted xls file can cause a heap corruption resulting in arbitrary code execution. An attacker can provide a malicious xls file to trigger thi...

CVE-2017-2795

CVE-2017-2795 exploits a heap overflow in Antenna House DMC HTMLFilter (Txo/Continue records). The code allocates a buffer with size derived from a field in TxO (bufferSize = 2 * word), then copies data into this buffer via a memcpy using a separate size from the Continue record. In observed samp...