Evernote 6.15 for Windows
Approved changes feed: RSS · Atom
cpe:2.3:a:evernote:evernote:6.15:*:*:*:*:windows:*:*
part: a version: 6.15 update: *
| Vendor | Evernote (05cbe5c0-aaaf-5f5d-b8d8-0f473aec17e3) |
|---|---|
| Product | Evernote (2be12ec8-30cd-5db5-99f5-720c87851dd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | windows |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-18524 |
vulnerable | 2026-06-08 05:11:14.206451 |
Details available
Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. After a victim opens an affected note under Present mode, the attacker can read the victim's files and achieve remote execution command on the victim's computer.
Published: 2019-05-13T13:02:05.000Z
Updated: 2024-08-05T11:15:58.909Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.