Page 2 of 14 results (0.001 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 3

CVE-2019-12137 – Typora 0.9.9.24.6 - Directory Traversal

https://notcve.org/view.php?id=CVE-2019-12137

16 May 2019 — Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note. En Typora 0.9.9.24.6 en macOS permite el cruce de directorios, para la ejecución de programas arbitrarios, mediante un archivo: /// o ../ subcadena en una nota compartida. Typora version 0.9.9.24.6 suffers from a directory traversal vulnerability. • https://packetstorm.news/files/id/153082 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-7295

https://notcve.org/view.php?id=CVE-2019-7295

31 Jan 2019 — typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula. typora hasta la versión 0.9.63 tiene Cross-Site Scripting (XSS), además de la ejecución remota de comandos, durante el renderizado en bloque de una fórmula matemática. • https://github.com/typora/typora-issues/issues/2129 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 1

CVE-2019-7296

https://notcve.org/view.php?id=CVE-2019-7296

31 Jan 2019 — typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula. typora, hasta la versión 0.9.64, tiene Cross-Site Scripting (XSS), además de la ejecución remota de comandos, durante el renderizado inline de una fórmula matemática. • https://github.com/typora/typora-issues/issues/2131 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 1%CPEs: 94EXPL: 1

CVE-2019-6803

https://notcve.org/view.php?id=CVE-2019-6803

25 Jan 2019 — typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar. typora, hasta la versión beta 0.9.9.20.3, tiene Cross-Site Scripting (XSS), que desemboca en la ejecución de comandos remota en la barra "outline" izquierda. • https://github.com/typora/typora-issues/issues/2124 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •