remarkable project records
4 published records for vendor remarkable project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2019-12041No exploit | lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.remarkable project · remarkable · CWE-1333 | High7.5 | — | 1.3% | May 13, 2019 |
24Monitor | CVE-2017-16006No exploit | Remarkable is a markdown parser.remarkable project · remarkable · CWE-79 | Medium6.1 | — | 0.9% | Jun 4, 2018 |
24Monitor | CVE-2014-10065No exploit | Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing forremarkable project · remarkable · CWE-94 | Medium6.1 | — | 0.9% | May 31, 2018 |
24Monitor | CVE-2019-12043No exploit | In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demremarkable project · remarkable · CWE-79 | Medium6.1 | — | 0.8% | May 13, 2019 |
- CVE-2019-1204130Monitor
lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section.
HighCVSS 7.5No exploitEPSS 1%remarkable project · remarkableMay 13, 2019
- CVE-2017-1600624Monitor
Remarkable is a markdown parser.
MediumCVSS 6.1No exploitEPSS 0%remarkable project · remarkableJun 4, 2018
- CVE-2014-1006524Monitor
Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for
MediumCVSS 6.1No exploitEPSS 0%remarkable project · remarkableMay 31, 2018
- CVE-2019-1204324Monitor
In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as dem
MediumCVSS 6.1No exploitEPSS 0%remarkable project · remarkableMay 13, 2019