Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
evernote evernote vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2023-50643
An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote malicious user to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components.
Evernote Evernote 10.68.2
1 Github repository
8.8
CVSSv3
CVE-2020-17759
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941.
Evernote Evernote 6.17.7
Evernote Evernote 6.18
5.4
CVSSv3
CVE-2018-19658
The Markdown editor in YXBJ prior to 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.
Evernote Yinxiang Biji
7.1
CVSSv3
CVE-2013-5116
Evernote before 5.5.1 has insecure password change
Evernote Evernote
4.6
CVSSv3
CVE-2013-5112
Evernote prior to 5.5.1 has insecure PIN storage
Evernote Evernote
7.8
CVSSv3
CVE-2019-17051
Evernote prior to 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.
Evernote Evernote
6.1
CVSSv3
CVE-2019-12592
A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension prior to 7.11.1 for Chrome allows remote malicious users to run arbitrary web script or HTML in the context of any loaded 3rd-party IFrame.
Evernote Web Clipper
7.8
CVSSv3
CVE-2019-10038
Evernote 7.9 on macOS allows malicious users to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.
Evernote Evernote 7.9
1 EDB exploit
6.1
CVSSv3
CVE-2018-18524
Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. After a victim opens an affected note under Present mode, the attacker can read the victim's files and achieve remote ...
Evernote Evernote 6.15
6.1
CVSSv3
CVE-2018-20351
The Markdown component in Evernote (Chinese) prior to 8.3.2 on macOS allows stored XSS, aka MAC-832.
Evernote Evernote
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »