Lucene search
K

2197 matches found

Vulnrichment
Vulnrichment
added 2023/06/20 12:0 a.m.9 views

CVE-2020-21058

Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax...

7.5AI score0.00341EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/06/20 12:0 a.m.4 views

Typora 跨站脚本漏洞

Typora is an editor. A security vulnerability exists in Typora version 0.9.79. An attacker can exploit the vulnerability to execute arbitrary code via mermaid syntax...

6.1CVSS6.8AI score0.00341EPSS
Exploits1References2
CVE
CVE
added 2023/06/20 12:0 a.m.26 views

CVE-2020-21058

Typora v0.9.79 has a Cross‑Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via the mermaid syntax. The connected sources confirm Typora is affected, but do not provide exploitation details, affected versions beyond 0.9.79, or a remediation/patch. Informa...

6.1CVSS6.4AI score0.00341EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/20 12:0 a.m.14 views

CVE-2020-21058

Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax...

6.5AI score0.00341EPSS
Exploits1References1
Microsoft CVE
Microsoft CVE
added 2023/06/05 7:0 a.m.4 views

Possible DoS translating ASN.1 object identifiers

...

6.5CVSS6.8AI score0.91012EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/06/02 2:29 a.m.2 views

SUSE CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

5.5CVSS6.9AI score0.00027EPSS
Exploits0References6
OSV
OSV
added 2023/06/01 1:15 a.m.0 views

UBUNTU-CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

7.1CVSS7.2AI score0.00027EPSS
Exploits0References6
OSV
OSV
added 2023/05/24 9:57 a.m.3 views

USN-6102-1 node-xmldom vulnerabilities

It was discovered that xmldom incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause unexpected syntactic changes during XML processing. This issue only affected Ubuntu...

9.8CVSS7.3AI score0.01344EPSS
Exploits1References4
OSV
OSV
added 2023/05/22 10:15 a.m.2 views

CVE-2022-47167

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

8.8CVSS5.8AI score0.00104EPSS
Exploits0References1
Prion
Prion
added 2023/05/22 10:15 a.m.14 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

6.8CVSS8.7AI score0.00104EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/22 9:14 a.m.7 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00104EPSS
Exploits0References1
CVE
CVE
added 2023/05/22 9:14 a.m.56 views

CVE-2022-47167

CVE-2022-47167 affects the WordPress Crayon Syntax Highlighter plugin, versions

8.8CVSS7.2AI score0.00104EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/22 9:14 a.m.12 views

CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin = 2.8.4 versions...

5.4CVSS9AI score0.00104EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/22 12:0 a.m.2 views

WordPress Plugin Crayon Syntax Highlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00104EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/22 12:0 a.m.2 views

PT-2023-15210 · Aram Kocharyan · Crayon Syntax Highlighter

Name of the Vulnerable Software and Affected Versions: Aram Kocharyan Crayon Syntax Highlighter plugin versions = 2.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

8.8CVSS8.4AI score0.00104EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/05/20 12:0 a.m.39 views

RHEL 8 : Image Builder (RHSA-2023:2780)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2780 advisory. Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood...

7.5CVSS7.3AI score0.00331EPSS
Exploits1References22
OpenVAS
OpenVAS
added 2023/05/19 12:0 a.m.10 views

Fedora: Security Advisory for rust-git-delta (FEDORA-2023-37ae269843)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00318EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2023/05/18 2:27 p.m.53 views

Moderate: Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 security update

Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

7.5CVSS6.8AI score0.00331EPSS
Exploits2References10
Fedora
Fedora
added 2023/05/18 12:50 a.m.17 views

[SECURITY] Fedora 37 Update: rust-git-delta-0.13.0-5.fc37

Syntax-highlighting pager for git...

7.5CVSS7.1AI score0.00318EPSS
Exploits1
Kitploit
Kitploit
added 2023/05/16 12:30 p.m.26 views

Cbrutekrag - Penetration Tests On SSH Servers Using Brute Force Or Dictionary Attacks. Written In C

Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by local law rules...

7.3AI score
Exploits0References1
Rows per page
Query Builder