Vmd Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vmd Project records in CISA KEV

No Vmd Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vmd 1 record LOW

Records

1 record in Vmd · all components

TI-2021-12644 CVE-2021-33041 · GHSA-pfr3-87q3-65rc

vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron…

LOW 30

vmd through 1.34.0 allows 'div class="markdown-body"' XSS, as demonstrated by Electron remote code execution via require('child_process').execSync('calc.exe') on Windows and a similar attack on macOS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01173 Published 2021-05-17 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0