4 matches found
SUSE CVE-2022-35133
A cross-site scripting XSS vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node...
CVE-2022-35133
A cross-site scripting XSS vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node...
CherryTree 跨站脚本漏洞
CherryTree is a hierarchical note-taking application by the individual developer Giuseppe Penone in the UK. With rich text and syntax highlighting, storing data in a single XML or SQLite file. A security vulnerability exists in CherryTree version v0.99.30, which stems from a vulnerability that...
Vobot Clock Remote Code Execution Vulnerability
The Vobot Clock is a smart bedside alarm clock equipped with Amazon Alexa, Sleep Coach and Daily Routine programs. A remote code execution vulnerability exists in VOBOT CLOCK versions prior to 0.99.30. The vulnerability arises due to the use of plaintext HTTP to download the breakout program. A...