Filtered by vendor Notable Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-16608 1 Notable 1 Notable 2024-08-04 9.6 Critical
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
CVE-2022-29281 1 Notable 1 Notable 2024-08-03 8.8 High
Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program (or theft of NTLM credentials via an SMB relay attack, because the application resolves UNC paths).
CVE-2022-26198 1 Notable 1 Notable 2024-08-03 9.8 Critical
Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.