Joplin Vulnerable to Cross-site Scripting in Note Content

Joplin version prior to 1.0.90 contains a Cross-site Scripting XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here...

CVE-2018-19609

ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified pageid, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL...

Joplin Cross-Site Scripting Vulnerability

Joplin is an open source document note-taking application based on the Markdown format. The program supports copying, marking and modification of text and so on. A cross-site scripting vulnerability exists in the Note content field in versions of Joplin prior to 1.0.90. A remote attacker can...

CVE-2018-1000534

Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here...

CVE-2018-1000534

Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here...

PT-2018-9430

Name of the Vulnerable Software and Affected Versions Joplin versions prior to 1.0.90 Description The issue is related to a Cross-site Scripting XSS vulnerability that can evolve into code execution due to enabled nodeIntegration for a particular BrowserWindow instance. The XSS was identified in...

CVE-2018-1000534: Improper Neutralization of Input During Web Page Generation

Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content...

PT-2018-8364

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Description An issue in certain Apple products allows local users to obtain sensitive information. The issue involves the Notes component, where users can read search results containing locked-note content, thus gainin...

(spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content

Multiple cross-site scripting XSS vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network RHN Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the 1 subject or 2 content values of a note in a system.addNote XML-RPC call...