Lucene search
+L

32 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•13 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS6.3AI score0.00774EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:25 a.m.•14 views

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

6.1CVSS6.3AI score0.00774EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-1664

Malware in sbrugna...

6.1CVSS6.3AI score0.00739EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2021-1689

Malware in sbrugna...

6.1CVSS6.4AI score0.00774EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2021/08/02 5:23 p.m.•65 views

Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

6.1CVSS5.8AI score0.00774EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/08/02 5:23 p.m.•67 views

GHSA-F2C9-5JQW-3XH3 Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

6.1CVSS5.8AI score0.00774EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2021/08/02 5:22 p.m.•61 views

qiita-markdown Cross-site Scripting vulnerability

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS3.3AI score0.00739EPSS
SaveExploits0References6Affected Software1
RubySec
RubySec
•added 2021/08/02 12:00 a.m.•25 views

Cross-Site Scripting in Qiita::Markdown

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

6.1CVSS6.3AI score0.00774EPSS
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2021/08/02 12:00 a.m.•56 views

XSS in qiita-markdown

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS3.8AI score0.00774EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2021/06/21 3:30 p.m.•9 views

Cross-site Scripting (XSS)

Overview qiita-markdown is a Qiita-specified markdown processor. Affected versions of this package are vulnerable to Cross-site Scripting XSS via a crafted gist link, a different vulnerability than CVE-2021-28796. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...

6.1CVSS5.4AI score0.00774EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/21 1:15 p.m.•16 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS5.6AI score
SaveExploits0References2
NVD
NVD
•added 2021/06/21 1:15 p.m.•20 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS0.00739EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/21 1:15 p.m.•9 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS6AI score0.00739EPSS
SaveExploits0References3
Prion
Prion
•added 2021/06/21 1:15 p.m.•28 views

Design/Logic Flaw

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

4.3CVSS5.8AI score0.00774EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/21 12:18 p.m.•36 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6AI score0.00739EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/21 12:18 p.m.•80 views

CVE-2021-28833

Qiita-Markdown (Ruby gem) up to versions before 0.34.0 is vulnerable to cross-site scripting via crafted gist links (CVE-2021-28833). Red Hat advisories and RubySec confirm this as a separate issue from CVE-2021-28796 and describe the same general class of XSS in the transformer/gist handling pat...

6.1CVSS5.7AI score0.00739EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/06/21 12:18 p.m.•3 views

CVE-2021-28833

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS0.00739EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/21 12:00 a.m.•6 views

CVE-2021-28833: Improper Neutralization of Input During Web Page Generation

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796...

6.1CVSS5.8AI score0.00739EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/21 12:00 a.m.•5 views

PT-2021-17953

Name of the Vulnerable Software and Affected Versions: Qiita::Markdown versions prior to 0.34.0 Description: The issue allows for XSS attacks via a crafted gist link. Recommendations: For versions prior to 0.34.0, update to version 0.34.0 or later to resolve the issue...

6.1CVSS0.00739EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/06/21 12:00 a.m.•13 views

Getty104 Qiita::Markdown 跨站脚本漏洞

Getty104 qiita-markdown is Getty104 an open source application . Provides an editor function. A cross-site scripting vulnerability exists in versions prior to Qiita::Markdown 0.34.0, which stems from the program allowing XSS via a crafted gist link...

6.1CVSS5.8AI score0.00739EPSS
SaveExploits0References2
Rows per page
Query Builder