Vmd

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-33041 May 17, 17:15 npm MEDIUM POC This Month

vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require('child_process').execSync('calc.exe') on Windows and a similar attack on macOS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Apple Microsoft Vmd

NVD GitHub

CVSS 3.1

6.1

EPSS

1.2%

CVE-2021-33041 npm

EPSS 1% CVSS 6.1

MEDIUM POC This Month

vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require('child_process').execSync('calc.exe') on Windows and a similar attack on macOS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Apple +2

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy