95 matches found
CVE-2024-0849 Leanote 2.7.0 - Local File Read
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR...
Leanote Path Traversal Vulnerability
Leanote is an open source notepad application. Leanote version 2.7.0 suffers from a path traversal vulnerability that originates from allowing access to arbitrary local files...
CVE-2024-0849: Improper Limitation of a Pathname to a Restricted Directory
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR...
PT-2024-15865 · Leanote · Leanote
Name of the Vulnerable Software and Affected Versions: Leanote version 2.7.0 Description: The issue allows obtaining arbitrary local files because the application is vulnerable to Local File Reading LFR. Recommendations: For Leanote version 2.7.0, at the moment, there is no information about a...
leanote vulnerable to cross-site scripting
A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
GHSA-6CMV-2548-82V4 leanote vulnerable to cross-site scripting
A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
CVE-2021-4263
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263 leanote history.js define cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263
CVE-2021-4263 affects leanote 2.6.1. The vulnerability is a cross-site scripting in the define function of public/js/plugins/history.js, caused by improper handling of the content argument. It can be exploited remotely; a patch identified as 0f9733c890077942150696dcc6d2b1482b7a0a19 exists and sho...
PT-2022-11637 · Leanote · Leanote
Name of the Vulnerable Software and Affected Versions: leanote version 2.6.1 Description: A problematic issue has been found in leanote, affecting the function define of the file public/js/plugins/history.js. The manipulation of the content argument leads to cross-site scripting. The attack may b...
CVE-2021-4263 leanote history.js define cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
Leanote 跨站脚本漏洞
Leanote is an open source notepad application. Leanote suffers from a cross-site scripting vulnerability that originates in the function definition of the file public/js/plugins/history.js, where manipulation of the content of the parameters results in cross-site scripting...
Leanote Cross-Site Scripting Vulnerability (CNVD-2022-34645)
Leanote is an open source notepad application. Leanote is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause remote code execution using payloads...
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...