CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 04/04/2023 |
| CVE-2019-14653 | MÉDIO6.1 | pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element. | 03/08/2019 |
| CVE-2019-9737 | MÉDIO6.1 | Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring. | 13/03/2019 |
| CVE-2018-19056 | MÉDIO6.1 | pandao Editor.md 1.5.0 has DOM XSS via input starting with a "<<" substring, which is mishandled during construction of an A element. | 07/11/2018 |
| CVE-2018-16330 | MÉDIO6.1 | Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element. | 02/09/2018 |