Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-46603

An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Inkdrop
Products
Inkdrop
CVE-2023-44141

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Inkdrop
Products
Inkdrop
CVE-2022-38639

A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Inkdrop
Products
Markdown Nice
CVE-2021-20745

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Inkdrop
Products
Inkdrop