75 matches found
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
Design/Logic Flaw
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
Design/Logic Flaw
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
CVE-2020-26157
CVE-2020-26157 affects Leanote Desktop up to version 2.6.2. The root cause is a mishandled note title during syncing that enables cross-site scripting (XSS). This vulnerability is described as leading to remote code execution due to Node integration. The available documents do not specify a concr...
CVE-2020-26157
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration...
CVE-2020-26158
Leanote Desktop (up to and including 2.6.2) exposes a vulnerability where triggering the batch feature mishandles a note title, enabling a cross-site scripting (XSS) vector that can lead to remote code execution via Node integration. Root cause: improper handling of the note title within the batc...
CVE-2020-26158
Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration...
Leanote cross-site scripting vulnerability (CNVD-2019-22606)
Leanote is an open source notepad application. A cross-site scripting vulnerability exists in versions prior to Leanote 2.6. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...
Cross-site Scripting (XSS)
github.com/leanote/leanote is vulnerable cross-site scripting XSS. The attack is possible due to lack of sanitization in markdown note provided by user...
CVE-2019-1010003
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...
CVE-2019-1010003
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...
Cross site scripting
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...
CVE-2019-1010003
Leanote is affected by CVE-2019-1010003: XSS in versions prior to 2.6. The CNVD entry states the vulnerability stems from a lack of proper validation of client-side data by the web application, allowing an attacker to execute client-side code. The Red Hat/NVD variants also reference Leanote prior...
CVE-2019-1010003
Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...
Leanote cross-site scripting vulnerability (CNVD-2018-21793)
Leanote is an open source notepad application. A cross-site scripting vulnerability exists in the Blog Basic Setting page in Leanote version 2.6.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the title field...