Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2019-12043 In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated… Remarkable No fix yet Fix from $1,6002019-05-13 HIGH 7.5 CVE-2019-12041 lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. Remarkable No fix yet Fix from $1,9502019-05-13 MEDIUM 6.1 CVE-2017-16006 Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript. Remarkable after 1.6.2 Fix from $1,6002018-06-04 MEDIUM 6.1 CVE-2014-10065 Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascri… Remarkable 1.4.1+ Fix from $1,6002018-05-31