169 matches found
CVE-2016-4900
CVE-2016-4900 affects Evernote for Windows prior to 6.3, due to an untrusted DLL search path that can cause arbitrary code execution. Multiple sources (NVD/NVDC references, JVN entries, CNVD, and Kaspersky advisories) describe that an attacker could exploit a Trojan horse DLL loaded from an unspe...
CVE-2016-4900
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
KLA11369 Information disclosure Vulnerability in Evernote
Untrusted search path vulnerability was found in Evernote. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2016-4900 Related products EverNote CVE list CVE-2016-4900 high Solution Update to the latest version Evernote Impacts ACE Arbitrary...
Installer of Evernote for Windows may insecurely load Dynamic Link Libraries
Overview The installer of Evernote for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informati...
JVN#03251132: Installer of Evernote for Windows may insecurely load Dynamic Link Libraries
The installer of Evernote for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the Latest Installer Use the latest installer...
Evernote Loaded Remote Code Execution Vulnerability
Evernote Impression Notes is a suite of note-taking software from the American company Evernote. The software allows you to create, manage, synchronize, search and share notes anytime, anywhere. A loaded remote code execution vulnerability exists in Evernote for Windows version 6.1.2.2292. A remo...
Evernote 6.1.2.2292 DLL Hijacking
Aloha, Summary Evernote contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to some DLL file is loaded by 'Evernote6.1.2.2292.exe' improperly. And it allows an attacker to load...
Evernote - stay organized. - Apache license, BSD license, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Evernote - stay organized. published at the 'play' market has multiple vulnerabilities...
MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability
Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...
Evernote < 5.8.1 ActiveX Control Arbitrary File Overwrite
The version of Evernote installed on the remote Windows host is prior to 5.8.1. It is, therefore, affected by an arbitrary file overwrite vulnerability in the EvernoteIE.dll ActiveX control due to using the writeFileContent, LoadFile, and ReadFileContent methods in an insecure manner. A remote,...
EVERNOTE Cloud Service Detection
Binary data 8445.prm...
Evernote official community hacked, user passwords exist leakage risk-vulnerability warning-the black bar safety net
Evernote official community by unknown hackers to attack and invade, hackers in some cases be able to obtain the user's login information and personal information. Evernote community Manager Geoff Barry, released today regarding the data breach statement: “https://discussion.evernote.com the...
Feedly and Evernote Hit by DDoS Attacks, Extortion Demands
Yesterday, the most popular RSS reader Feedly was down as a result of a large scale distributed-denial-of service DDoS attack carried by the cybercriminals to extort money. On Wednesday, the Feedly was temporarily unavailable for its users. Feedly posted details of the attack at 5:00 AM ET on its...
DDoS Attacks Take Down Evernote, Feedly
UPDATED — News aggregator Feedly is still offline Thursday as continues to battle a series of distributed denial of service attacks that’s kept the service down for two consecutive days. The site was able to get back online shortly after 3 p.m. Wednesday after it neutralized the first DDoS attack...
Evernote Android security vulnerabilities
Different protection bypass vulnerabilities...
[CVE-2013-5116] Evernote Android Insecure Password Change (one-click setup)
Evernote Android Insecure Password Change one-click setup Product: Evernote Android Project Homepage: evernote.com Internal Advisory ID: c22-2013-05 Vulnerable Versions: Android version 5.5.0 and prior Tested Version: Android 5.x Android 4.2/4.3 Vendor Notification: Aug 13, 2013 Public Disclosure...
[CVE-2013-5112] Evernote Android Insecure Storage of PIN data / Bypass of PIN protection
Evernote Android Insecure Storage of PIN data / Bypass of PIN protection Product: Evernote Android Project Homepage: evernote.com Internal Advisory ID: c22-2013-03 / c22-2013-04 Vulnerable Versions: Android version 5.5.0 and prior Tested Version: Android 5.x Android 4.2/4.3 Vendor Notification: A...
The Android framework layer vulnerability-Fragment injection-vulnerability warning-the black bar safety net
Original: A New Vulnerability in the Android Framework: Fragment Injection Source: http://securityintelligence.com/new-vulnerability-android-framework-fragment-injection/comments Author: Roee Hay,IBM's Application Security Research Team Time: 2013.12.10 Recently we to the Android security team ha...
Evernote: Wormable stored XSS in www.evernote.com
The Evernote iOS application leverages the Evernote API to synchronize notes with the backend. When a new note is created or updated, a request is submitted to the backend that wraps the note in an XML document. This request also contains metadata about which parts of the note is updated. The XML...
Evernote Two-Factor Authentication for Paid Accounts
Cloud-based note taking service Evernote this week pushed out three new security features including two-factor authentication for some users’ accounts in hopes of adding an extra layer of protection. The service is among the latest to hop on the two-step verification bandwagon, following Amazon...