PT-2020-16315

Name of the Vulnerable Software and Affected Versions Leanote Desktop versions prior to 2.6.3 Description The issue arises from the mishandling of a note's title when the batch feature is triggered, leading to XSS. This, in turn, results in remote code execution due to Node integration...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000492

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...

CVE-2017-1000492

CVE-2017-1000492 affects Leanote-desktop v2.5. The vulnerability is a cross-site scripting (XSS) flaw caused by enabled Node integration, which can lead to code execution. Multiple sources (NVD and Red Hat, OSV, CNVD, etc.) corroborate the issue. CVSS details: CVSS2 base 4.3 (I:P) and CVSS3 base ...

Leanote-desktop Cross-Site Scripting Vulnerability

Leanote-desktop is an open source notepad application. A cross-site scripting vulnerability exists in Leanote-desktop v2.5. A remote attacker can exploit this vulnerability to execute code...

PT-2018-5256

Name of the Vulnerable Software and Affected Versions Leanote-desktop version v2.5 Description The issue is related to a XSS that leads to code execution due to enabled node integration. Recommendations For Leanote-desktop version v2.5, consider disabling node integration as a temporary workaroun...

CVE-2017-1000492: Improper Neutralization of Input During Web Page Generation

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration...