Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/12/21 9:30 p.m.18 views

leanote vulnerable to cross-site scripting

A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

6.1CVSS6.5AI score0.00245EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2022/12/21 7:15 p.m.11 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

5.8CVSS6AI score0.00245EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/12/21 12:0 a.m.3 views

Leanote 跨站脚本漏洞

Leanote is an open source notepad application. Leanote suffers from a cross-site scripting vulnerability that originates in the function definition of the file public/js/plugins/history.js, where manipulation of the content of the parameters results in cross-site scripting...

6.1CVSS4.3AI score0.00245EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/12/21 12:0 a.m.14 views

CVE-2021-4263 leanote history.js define cross site scripting

A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...

4CVSS6.2AI score0.00245EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/12/21 12:0 a.m.3 views

PT-2022-11637 · Leanote · Leanote

Name of the Vulnerable Software and Affected Versions: leanote version 2.6.1 Description: A problematic issue has been found in leanote, affecting the function define of the file public/js/plugins/history.js. The manipulation of the content argument leads to cross-site scripting. The attack may b...

6.1CVSS4.4AI score0.00245EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2017/07/29 2:0 p.m.19 views

CVE-2017-11737

interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page...

6.1CVSS6AI score0.00223EPSS
Exploits1
Rows per page
Query Builder