Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/13 8:18 p.m.•12 views

CVE-2026-86022

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS0.0021EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/13 7:17 p.m.•11 views

CVE-2026-86022

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7.3CVSS6.6AI score0.0021EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/13 7:17 p.m.•21 views

CVE-2026-86022 VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS6.6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/13 7:17 p.m.•14 views

CVE-2026-86022 VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS6.6AI score0.0021EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/13 7:17 p.m.•26 views

CVE-2026-86022 VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS0.0021EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-86022: Improper Neutralization of Special Elements used in an OS Command

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS6.6AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112874

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

7CVSS6.6AI score0.0021EPSS
SaveExploits0References4
Rows per page
Query Builder