84 matches found
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note, which the reports describe as enabling remote code execution via a crafted payload such as: . The vulnerability stems from XSS in the markdown rendering, with no additional exploit details provided beyond the pay...
Leanote 跨站脚本漏洞
Leanote is an open source notepad application. Leanote is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to cause remote code execution using payloads...
CVE-2021-43721: Improper Neutralization of Input During Web Page Generation
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
Design/Logic Flaw
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
Design/Logic Flaw
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26157
CVE-2020-26157 affects Leanote Desktop up to version 2.6.2. The root cause is a mishandled note title during syncing that enables cross-site scripting (XSS). This vulnerability is described as leading to remote code execution due to Node integration. The available documents do not specify a concr...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26158
Leanote Desktop (up to and including 2.6.2) exposes a vulnerability where triggering the batch feature mishandles a note title, enabling a cross-site scripting (XSS) vector that can lead to remote code execution via Node integration. Root cause: improper handling of the note title within the batc...
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
CVE-2020-26157: Improper Neutralization of Input During Web Page Generation
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26158: Improper Neutralization of Input During Web Page Generation
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
Leanote cross-site scripting vulnerability (CNVD-2019-22606)
Leanote is an open source notepad application. A cross-site scripting vulnerability exists in versions prior to Leanote 2.6. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...
Cross-site Scripting (XSS)
github.com/leanote/leanote is vulnerable cross-site scripting XSS. The attack is possible due to lack of sanitization in markdown note provided by user...
CVE-2019-1010003
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...