Advisories · Technology
VNote.
Every CVE that names VNote among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variables
- VNote
- Command injection
- CVSS 7.0 High
VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling
- vnote
- Command injection
- CVSS 8.2 High
VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration
- vnote
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
vnotex vnote YAML Frontmatter markdownit.js cross site scripting
- vnote
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.6 High
VNote vulnerable to Markdown XSS, which leads to RCE
- vnote
- Cross-site scripting (XSS)
- CVSS 8.8 High
Code Execution Vulnerability via Local File Path Traversal in Vnote
- vnote
- Path traversal
- CVSS 4.3 Medium
vnotex vnote Markdown File cross site scripting
- vnote
- Cross-site scripting (XSS)