Approved changes feed: RSS · Atom
cpe:2.3:a:evernote:evernote:*:*:*:*:*:macos:*:*
part: a version: * update: *
| Vendor | Evernote (05cbe5c0-aaaf-5f5d-b8d8-0f473aec17e3) |
|---|---|
| Product | Evernote (2be12ec8-30cd-5db5-99f5-720c87851dd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | macos |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-17051 |
vulnerable | 2026-06-08 05:13:09.817133 |
Details available
Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.
Published: 2019-09-30T19:05:56.000Z
Updated: 2024-08-05T01:33:15.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20058 |
vulnerable | 2026-06-08 05:11:26.601624 |
Details available
In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-28634.
Published: 2018-12-11T09:00:00.000Z
Updated: 2024-08-05T11:51:18.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.