Lucene search
K

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/23 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-33347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark is a PHP Markdown parser. From version 2.3.0 to before version 2.8.2, the DomainFilteringAdapter in the Embed extension is vulnerable to an...

6.3CVSS5.8AI score0.00015EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-5057

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.0031EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 12:59 p.m.6 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.8AI score0.0031EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.5 views

CVE-2019-10010

Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...

6.1CVSS5.8AI score0.00326EPSS
Exploits2References1
OSV
OSV
added 2022/05/14 1:40 a.m.18 views

GHSA-QX76-C53F-5C7Q PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.9AI score0.0031EPSS
Exploits1References6
CNVD
CNVD
added 2019/03/25 12:0 a.m.1 views

PHP League CommonMark library cross-site scripting vulnerability

PHP League CommonMark library is a PHP-based Markdown parser from the Extraordinary Packages consortium. A cross-site scripting vulnerability exists in PHP League CommonMark library versions prior to 0.18.3, which stems from the program failing to properly escape double-encoded HTML entities. A...

6.1CVSS6.5AI score0.00326EPSS
Exploits1References1
NVD
NVD
added 2019/03/24 6:29 p.m.9 views

CVE-2019-10010

Cross-site scripting XSS vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583...

6.1CVSS6AI score0.00326EPSS
Exploits1References2
CNVD
CNVD
added 2018/12/31 12:0 a.m.3 views

commonmark cross-site scripting vulnerability

PHP League CommonMark library is a PHP-based Markdown parser. A cross-site scripting vulnerability exists in PHP League CommonMark library versions 0.15.6 through 0.18.1 and earlier. A remote attacker can exploit this vulnerability by injecting insecure URLs into HTML using line breaks...

6.1CVSS6.4AI score0.0031EPSS
Exploits1References1
NVD
NVD
added 2018/12/30 5:29 a.m.12 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS6AI score0.0031EPSS
Exploits1References3
Prion
Prion
added 2018/12/30 5:29 a.m.7 views

Cross site scripting

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

4.3CVSS6AI score0.0031EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2018/12/30 5:29 a.m.11 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6.1CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2018/12/30 5:0 a.m.13 views

CVE-2018-20583

Cross-site scripting XSS vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML even if allowunsafelinks is false via a newline character e.g., writing javascript as javascri%0apt...

6AI score0.0031EPSS
Exploits1References3
Rows per page
Query Builder