2359 matches found
CVE-2024-23997
Lukas Bach yana =1.0.16 is vulnerable to Cross Site Scripting XSS via src/electron-main.ts...
PT-2024-20224 · Unknown · Lukas Bach
Name of the Vulnerable Software and Affected Versions: Lukas Bach yana version 1.0.16 Description: The issue is related to Cross Site Scripting XSS via src/electron-main.ts. Recommendations: For version 1.0.16, update to a version that is 1.0.16 or later to resolve the issue. As a temporary...
Yana Security Breach
Yana is a powerful laptop application from the individual developer Lukas Bach. A security vulnerability exists in Yana version 1.0.16 and prior versions, which stems from a cross-site scripting vulnerability in the src/electron-main.ts location...
electron29 -- multiple vulnerabilities
Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-5499. Security: backported fix for CVE-2024-5493. Security: backported fix for CVE-2024-5494. Security: backported fix for CVE-2024-5495. Security: backported fix for CVE-2024-5496...
Malicious code in en-conduit-electron-worker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2298 Malicious code in en-conduit-electron-worker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2297 Malicious code in en-conduit-electron-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in en-conduit-electron-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in en-conduit-electron-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2296 Malicious code in en-conduit-electron-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2295 Malicious code in en-conduit-electron (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in en-conduit-electron (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in electron-meeting-sdk-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2290 Malicious code in electron-meeting-sdk-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in daily-electron (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2061 Malicious code in daily-electron (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-39517 Cross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin
Joplin is a free, open source note taking and to-do application. A Cross site scripting XSS vulnerability in affected versions allows clicking on an untrusted image link to execute arbitrary shell commands. The HTML sanitizer packages/renderer/htmlUtils.ts::sanitizeHtml preserves links. However,...
CVE-2023-39517 Cross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin
Joplin is a free, open source note taking and to-do application. A Cross site scripting XSS vulnerability in affected versions allows clicking on an untrusted image link to execute arbitrary shell commands. The HTML sanitizer packages/renderer/htmlUtils.ts::sanitizeHtml preserves links. However,...