Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2556▼ 352 respecto a la semana anterior

Críticas / altas1335▲ 66 respecto a la semana anterior

Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 434 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-30027	Modificada	Media (5.5)	0.70%	—	Md4c Project Md4c	29/4/2021	17/6/2026	md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document.
CVE-2020-26148	Modificada	Alta (7.5)	1.4%	—	Md4c Project Md4c	30/9/2020	17/6/2026	md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.
CVE-2018-12112	Modificada	Alta (7.8)	1.3%	—	Md4c Project Md4c	11/6/2018	17/6/2026	md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact via a crafted file.
CVE-2018-12102	Modificada	Media (5.5)	0.85%	—	Md4c Project Md4c	11/6/2018	17/6/2026	md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.
CVE-2018-11547	Modificada	Crítica (9.8)	1.6%	—	Md4c Project Md4c	29/5/2018	17/6/2026	md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination.
CVE-2018-11546	Modificada	Crítica (9.8)	1.6%	—	Md4c Project Md4c	29/5/2018	17/6/2026	md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.
CVE-2018-11545	Modificada	Crítica (9.8)	1.6%	—	Md4c Project Md4c	29/5/2018	17/6/2026	md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely of backslash escapes.
CVE-2018-11536	Modificada	Crítica (9.8)	1.7%	—	Md4c Project Md4c	29/5/2018	17/6/2026	md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.