Filtered by vendor Notable
Subscriptions
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2020-16608 | 1 Notable | 1 Notable | 2024-08-04 | 9.6 Critical |
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true). | ||||
CVE-2022-29281 | 1 Notable | 1 Notable | 2024-08-03 | 8.8 High |
Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program (or theft of NTLM credentials via an SMB relay attack, because the application resolves UNC paths). | ||||
CVE-2022-26198 | 1 Notable | 1 Notable | 2024-08-03 | 9.8 Critical |
Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field. |
Page 1 of 1.