Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2507▼ 428 respecto a la semana anterior
Críticas / altas1283▲ 3 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 465 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 1.6% | — | Redcarpet Project RedcarpetDebian Linux | 11/1/2021 | 17/6/2026 | Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used.… | |
| Modificada | Alta (7.5) | 2.5% | — | Redcarpet Project Redcarpet | 14/7/2015 | 17/6/2026 | Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. |