Lucene search
K

22 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/23 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-33347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP Markdown parser. From version 2.3.0 to before version 2.8.2, the DomainFilteringAdapter in the Embed extension is vulnerable to an...

6.3CVSS5.8AI score0.00015EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-0649

Malware in sbrugna...

6.1CVSS6.1AI score0.00326EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-5057

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.0031EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 12:59 p.m.6 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.8AI score0.0031EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.5 views

CVE-2019-10010

Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...

6.1CVSS5.8AI score0.00326EPSS
Exploits2References1
OSV
OSV
added 2022/05/14 1:40 a.m.18 views

GHSA-QX76-C53F-5C7Q PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.9AI score0.0031EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2021/07/06 12:0 a.m.14 views

Fedora: Security Advisory for php-league-flysystem (FEDORA-2021-b9187c535c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.2AI score0.07327EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/07/06 12:0 a.m.14 views

Fedora: Security Advisory for php-league-flysystem (FEDORA-2021-717516a2e9)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.2AI score0.07327EPSS
Exploits2References2
Fedora
Fedora
added 2021/07/04 1:9 a.m.58 views

[SECURITY] Fedora 33 Update: php-league-flysystem-1.1.4-1.fc33

Flysystem is a filesystem abstraction which allows you to easily swap out a local filesystem for a remote one. Autoloader: /usr/share/php/League/Flysystem/autoload.php...

9.8CVSS2.9AI score0.07327EPSS
Exploits2
CNVD
CNVD
added 2019/03/25 12:0 a.m.1 views

PHP League CommonMark library cross-site scripting vulnerability

PHP League CommonMark library is a PHP-based Markdown parser from the Extraordinary Packages consortium. A cross-site scripting vulnerability exists in PHP League CommonMark library versions prior to 0.18.3, which stems from the program failing to properly escape double-encoded HTML entities. A...

6.1CVSS6.5AI score0.00326EPSS
Exploits1References1
NVD
NVD
added 2019/03/24 6:29 p.m.9 views

CVE-2019-10010

Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...

6.1CVSS6AI score0.00326EPSS
Exploits1References2
CNVD
CNVD
added 2018/12/31 12:0 a.m.3 views

commonmark cross-site scripting vulnerability

PHP League CommonMark library is a PHP-based Markdown parser. A cross-site scripting vulnerability exists in PHP League CommonMark library versions 0.15.6 through 0.18.1 and earlier. A remote attacker can exploit this vulnerability by injecting insecure URLs into HTML using line breaks...

6.1CVSS6.4AI score0.0031EPSS
Exploits1References1
NVD
NVD
added 2018/12/30 5:29 a.m.12 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS6AI score0.0031EPSS
Exploits1References3
Prion
Prion
added 2018/12/30 5:29 a.m.7 views

Cross site scripting

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

4.3CVSS6AI score0.0031EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2018/12/30 5:29 a.m.11 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2018/12/30 5:0 a.m.13 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6AI score0.0031EPSS
Exploits1References3
seebug.org
seebug.org
added 2006/10/29 12:0 a.m.16 views

Php League 0.82 (classement.php) Remote SQL Injection Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== 'Script Name: Php League v0.82 classement.php Remote SQL Injection Exploit 'Code...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/10/27 12:0 a.m.28 views

PHP League 0.82 - 'classement.php' SQL Injection

exploit2.asp 'Note : If Wrong Id = "CTYPE html PUBLIC..... see" 'Using : Write Target and ID after Submit Click '=============================================================================================== % Php League v0.82 classement.php Remote SQL Injection Exploit function functionControl1...

7.4AI score
Exploits0
0day.today
0day.today
added 2006/10/27 12:0 a.m.35 views

Php League 0.82 (classement.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Php League 0.82 classement.php Remote SQL Injection Exploit ============================================================= exploit2.asp 'Note : If Wrong Id = "CTYPE html...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2006/10/25 12:0 a.m.15 views

Php League <= 0.81 (config.php) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlePhpLeague 0.81 Remote File Include Exploit/title script language="JavaScript" //'=============================================================================================...

7.1AI score
Exploits0
Rows per page
Query Builder