Lucene search
+L

19 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/14 12:00 a.m.•11 views

The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.9CVSS6.2AI score0.00387EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/07/14 12:00 a.m.•14 views

The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6.7AI score0.00136EPSS
SaveExploits1References3Affected Software2
Redos
Redos
•added 2026/06/26 12:00 a.m.•14 views

ROS-20260626-73-0026

The vulnerability in rubygem-rdiscount relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.9CVSS5.9AI score0.00387EPSS
SaveExploits1
CBLMariner
CBLMariner
•added 2026/05/09 3:31 a.m.•17 views

CVE-2026-35201 affecting package rubygem-rdiscount for versions less than 2.2.7.4-1

CVE-2026-35201 affecting package rubygem-rdiscount for versions less than 2.2.7.4-1. An upgraded version of the package is available that resolves this issue...

5.9CVSS5.8AI score0.00387EPSS
SaveExploits1
SUSE Linux
SUSE Linux
•added 2026/05/07 7:22 a.m.•15 views

Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 2.27. Security issues fixed: CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass bsc1261398. CVE-2026-26962: rack: improper unfolding of folded multipart headers can lead t...

8.7CVSS5.8AI score0.00658EPSS
SaveExploits0References40
OSV
OSV
•added 2026/05/07 7:22 a.m.•12 views

SUSE-SU-2026:1745-1 Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 2.27. Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass bsc1261398. - CVE-2026-26962: rack: improper unfolding of folded multipart headers can le...

7.5CVSS5.8AI score0.00658EPSS
SaveExploits0References21
Microsoft CVE
Microsoft CVE
•added 2026/04/15 8:05 a.m.•13 views

Discount has an Out-of-bounds Read in rdiscount

...

5.9CVSS5.8AI score0.00387EPSS
SaveExploits1
Photon
Photon
•added 2026/04/10 12:00 a.m.•13 views

Important Photon OS Security Update - PHSA-2026-5.0-0816

Updates of 'rubygem-rdiscount', 'python3-PyJWT' packages of Photon OS have been released...

5.5AI score
SaveExploits0
Photon
Photon
•added 2026/04/10 12:00 a.m.•20 views

Important Photon OS Security Update - PHSA-2026-4.0-0995

Updates of 'python3-PyJWT', 'libtiff', 'python3-pyasn1', 'rubygem-rdiscount', 'rubygem-activesupport', 'nodejs' packages of Photon OS have been released...

7.5CVSS6.5AI score0.25044EPSS
SaveExploits0
Photon
Photon
•added 2026/04/10 12:00 a.m.•30 views

Important Photon OS Security Update - PHSA-2026-5.0-91-0816

Updates of 'rubygem-rdiscount', 'python3-PyJWT' packages of Photon OS have been released...

5.9CVSS6.2AI score0.00387EPSS
SaveExploits1
Snyk
Snyk
•added 2026/04/06 9:26 p.m.•14 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper handling of input sizes in the parser process. An attacker can cause the application to crash by supplying input larger than the maximum signed integer value, which leads to reading past the end of the...

8.2CVSS5.8AI score0.00387EPSS
SaveExploits1References2
OSV
OSV
•added 2026/04/06 8:16 p.m.•8 views

AZL-82902 CVE-2026-35201 affecting package rubygem-rdiscount for versions less than 2.2.7.4-1

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6.3AI score0.00387EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/06 7:49 p.m.•20 views

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00387EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/06 7:49 p.m.•32 views

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS0.00387EPSS
SaveExploits1References1
OSV
OSV
•added 2026/04/06 5:53 p.m.•14 views

GHSA-6R34-94WQ-JHRC rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process Details In both...

5.9CVSS6AI score0.00387EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2026/04/06 5:53 p.m.•18 views

rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process Details In both...

5.9CVSS6AI score0.00387EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2026/04/06 5:53 p.m.•15 views

EUVD-2026-19474

rdiscount has an Out-of-bounds Read...

5.9CVSS5.9AI score0.00387EPSS
SaveExploits1References3
RubySec
RubySec
•added 2026/04/06 12:00 a.m.•22 views

rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. Details In both...

5.9CVSS7.2AI score0.00387EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2026/03/26 2:16 a.m.•14 views

AZL-81062 CVE-2026-4833 affecting package rubygem-rdiscount 2.2.7.4-1

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

4.8CVSS4.7AI score0.00161EPSS
SaveExploits0References1
Rows per page
Query Builder