84 matches found
CVE-2024-0849
CVE-2024-0849 (Leanote 2.7.0) is a local-file-read vulnerability caused by a Local File Reading (LFR) weakness, allowing an attacker to obtain arbitrary local files. The vulnerability is explicitly described in multiple sources as affecting Leanote version 2.7.0, with the impact being exposure of...
CVE-2024-0849: Improper Limitation of a Pathname to a Restricted Directory
Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR...
Leanote Path Traversal Vulnerability
Leanote is an open source notepad application. Leanote version 2.7.0 suffers from a path traversal vulnerability that originates from allowing access to arbitrary local files...
PT-2024-15865 · Leanote · Leanote
Name of the Vulnerable Software and Affected Versions: Leanote version 2.7.0 Description: The issue allows obtaining arbitrary local files because the application is vulnerable to Local File Reading LFR. Recommendations: For Leanote version 2.7.0, at the moment, there is no information about a...
GHSA-6CMV-2548-82V4 leanote vulnerable to cross-site scripting
A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
leanote vulnerable to cross-site scripting
A vulnerability, which was classified as problematic, has been found in leanote. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
CVE-2021-4263
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263 leanote history.js define cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263 leanote history.js define cross site scripting
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
CVE-2021-4263
CVE-2021-4263 affects leanote 2.6.1. The vulnerability is a cross-site scripting in the define function of public/js/plugins/history.js, caused by improper handling of the content argument. It can be exploited remotely; a patch identified as 0f9733c890077942150696dcc6d2b1482b7a0a19 exists and sho...
Leanote 跨站脚本漏洞
Leanote is an open source notepad application. Leanote suffers from a cross-site scripting vulnerability that originates in the function definition of the file public/js/plugins/history.js, where manipulation of the content of the parameters results in cross-site scripting...
CVE-2021-4263: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of t...
PT-2022-11637 · Leanote · Leanote
Name of the Vulnerable Software and Affected Versions: leanote version 2.6.1 Description: A problematic issue has been found in leanote, affecting the function define of the file public/js/plugins/history.js. The manipulation of the content argument leads to cross-site scripting. The attack may b...
Leanote Cross-Site Scripting Vulnerability (CNVD-2022-34645)
Leanote is an open source notepad application. Leanote is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause remote code execution using payloads...
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...