9 matches found
CVE-2026-126042
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
EUVD-2026-121332
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
CVE-2026-126042
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
CVE-2026-126042 VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
CVE-2026-126042 VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
CVE-2026-126042
VNote versions 3.11.0 before 4.12.0 are vulnerable to an OS command injection in the Tasks feature . The root cause is the lack of escaping when substituting magic variables, such as ${bufferName} and ${selectedText}, into shell command strings. An attacker can share a notebook containing a note ...
CVE-2026-126042 VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
PT-2026-141819
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...
CVE-2026-126042: vnotex VNote: VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as…
VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...