Lucene search
+L

2245 matches found

OSV
OSV
added 2023/02/22 11:15 p.m.6 views

UBUNTU-CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

5.5CVSS6AI score0.00227EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2023/02/22 11:15 p.m.19 views

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

5.5CVSS6.1AI score0.00227EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/22 11:15 p.m.19 views

PYSEC-2023-23

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

5.5CVSS5.3AI score0.00227EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/02/22 10:2 p.m.7 views

CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

3.3CVSS5.5AI score0.00227EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2023/02/22 10:2 p.m.79 views

CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

5.5CVSS5.4AI score0.00227EPSS
SaveExploits0
CVE
CVE
added 2023/02/22 10:2 p.m.139 views

CVE-2023-26302

CVE-2023-26302 affects markdown-it-py prior to 2.2.0, where the command-line interface can experience a denial of service when fed invalid UTF-8 input. The connected Fedora advisories and Nessus/OpenVAS entries confirm the vulnerability in python-markdown-it-py and indicate that updates exist (2....

5.5CVSS5.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/22 10:2 p.m.49 views

CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

3.3CVSS5.6AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/22 10:2 p.m.15 views

CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

3.3CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/02/22 12:0 a.m.11 views

PT-2023-20601

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description A denial of service could be caused if an attacker is allowed to force null assertions with specially crafted input. Recommendations For versions prior to 2.2.0, update to version 2.2.0 or lat...

7.1CVSS5.5AI score0.00227EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2023/02/22 12:0 a.m.12 views

markdown-it-py 安全漏洞

markdown-it-py is a Markdown parser open-sourced by Executable Books. A security vulnerability exists in markdown-it-py versions prior to v2.2.0, which stems from a denial of service that may result if an attacker is allowed to force null assertions using specially crafted input...

5.5CVSS5.7AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/02/22 12:0 a.m.12 views

PT-2023-20600

Name of the Vulnerable Software and Affected Versions markdown-it-py versions prior to 2.2.0 Description Denial of service could be caused to the command line interface of markdown-it-py if an attacker was allowed to use invalid UTF-8 characters as input. Recommendations For versions prior to...

7.1CVSS5.6AI score0.00227EPSS
SaveExploits0References18
CNNVD
CNNVD
added 2023/02/22 12:0 a.m.8 views

markdown-it-py 安全漏洞

markdown-it-py is a Markdown parser open-sourced by Executable Books. A security vulnerability exists in markdown-it-py versions prior to v2.2.0, which stems from a denial of service that may result if an attacker is allowed to use invalid UTF-8 characters as input...

5.5CVSS5.7AI score0.00227EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:18 a.m.7 views

SUSE CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

5.5CVSS6.7AI score0.00355EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.8 views

SUSE CVE-2012-1502

Double free vulnerability in the PyPAMconv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a NULL byte in a password string...

7.5CVSS8.1AI score0.14294EPSS
SaveExploits6References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:8 a.m.8 views

SUSE CVE-2019-16224

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

9.8CVSS9.3AI score0.01765EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:8 a.m.7 views

SUSE CVE-2019-16226

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

7.5CVSS7.4AI score0.01543EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.5 views

SUSE CVE-2020-29651

A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...

5.5CVSS6.8AI score0.04607EPSS
SaveExploits0References44
OpenVAS
OpenVAS
added 2023/02/14 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:0395-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.01664EPSS
SaveExploits1References4
OSV
OSV
added 2023/02/11 12:6 p.m.14 views

MAL-2023-1879 Malicious code in idscord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3d39786f116b2209474d5d52204c264d399788c719092dfa47594e44efc33802 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/11 12:6 p.m.5 views

Malicious code in idscord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3d39786f116b2209474d5d52204c264d399788c719092dfa47594e44efc33802 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

6.7AI score
SaveExploits0References1
Rows per page
Query Builder