Vulnerabilities
Summary — last 7 days
New vulnerabilities3,443▼ 183 vs. last week
Critical / high1,468▼ 167 vs. last week
New active exploitation (KEV)3▼ 7 vs. last week
Unscored (no CVSS)516▲ 193 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Low (2.1) | 0.95% | — | Yank-note Yank NoteAI | 11/5/2026 | 11/5/2026 | A vulnerability was identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is the function checkPermission of the file src/main/server/index.ts of the component Terminal Handler. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit is publicly available and… | |
| Deferred | Medium (5.5) | 0.32% | — | Yank-note Yank NoteAI | 11/5/2026 | 11/5/2026 | A vulnerability was found in purocean Yank Note 3.93.0. This impacts the function config.getAll of the file src/main/server/index.ts of the component Settings Endpoint. The manipulation results in information disclosure. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading… | |
| Deferred | High (8.2) | 0.46% | — | Yank-note Yank NoteAI | 10/19/2026 | 10/19/2026 | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlisted endpoint, to read… | |
| Modified | High (8.8) | 4.9% | Exploit | Yank-note Yank Note | 5/28/2023 | 6/17/2026 | Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process'). |