Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2744▼ 73 respecto a la semana anterior

Críticas / altas1416▲ 183 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-41392	Modificada	Crítica (9.8)	2.8%	—	Boostnote	17/9/2021	17/6/2026	static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
CVE-2020-19924	Modificada	Media (5.4)	0.53%	—	Issuehunt Boostnote	18/5/2021	17/6/2026	In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks.
CVE-2019-12184	Modificada	Media (5.4)	0.67%	—	Boostio Boostnote	19/5/2019	17/6/2026	There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136.
CVE-2019-12136	Modificada	Media (5.4)	0.61%	—	Boostio Boostnote	16/5/2019	17/6/2026	There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.
CVE-2018-13433	Modificada	Media (6.1)	0.86%	—	Boostnote	8/7/2018	17/6/2026	Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.