İçeriğe atla
Noroxi

Typora kayıtları

typora üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%4,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2023-2317
    39İzleyin

    Typora DOM-Based Cross-site Scripting leading to Remote Code Execution

    KritikCVSS 9,6İstismar yokEPSS %2

    typora · typora19 Ağu 2023

  • CVE-2019-20374
    39İzleyin

    A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to Remote Code Execution

    KritikCVSS 9,6İstismar yokEPSS %2

    typora · typora9 Oca 2020

  • CVE-2019-12137
    33İzleyin

    Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note

    YüksekCVSS 7,8Kavram kanıtıEPSS %6

    typora · typora16 May 2019

  • CVE-2019-12172
    32İzleyin

    Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demons

    YüksekCVSS 7,8İstismar yokEPSS %2

    typora · typora17 May 2019

  • CVE-2023-1003
    31İzleyin

    Typora WSH JScript code injection

    YüksekCVSS 7,8İstismar yokEPSS %0

    typora · typora7 Mar 2023

  • CVE-2023-2316
    29İzleyin

    Typora Local File Disclosure

    YüksekCVSS 7,4İstismar yokEPSS %1

    typora · typora19 Ağu 2023

  • CVE-2020-18336
    29İzleyin

    Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file

    YüksekCVSS 7,4İstismar yokEPSS %1

    typora · typora9 Eki 2023

  • CVE-2024-33300
    29İzleyin

    Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute

    YüksekCVSS 7,3İstismar yokEPSS %1

    typora · typora1 May 2024

  • CVE-2023-2971
    26İzleyin

    Typora Local File Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %0

    typora · typora19 Ağu 2023

  • CVE-2019-6803
    25İzleyin

    typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.

    OrtaCVSS 6,1İstismar yokEPSS %2

    typora · typora25 Oca 2019

  • CVE-2019-7296
    25İzleyin

    typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.

    OrtaCVSS 6,1İstismar yokEPSS %2

    typora · typora31 Oca 2019

  • CVE-2019-7295
    25İzleyin

    typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.

    OrtaCVSS 6,1İstismar yokEPSS %2

    typora · typora31 Oca 2019

  • CVE-2020-18737
    24İzleyin

    An issue was discovered in Typora 0.9.67.

    OrtaCVSS 6,1İstismar yokEPSS %1

    typora · typora5 Şub 2021

  • CVE-2020-18221
    24İzleyin

    Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during bloc

    OrtaCVSS 6,1İstismar yokEPSS %1

    typora · typora26 May 2021

  • CVE-2020-18748
    24İzleyin

    Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration er

    OrtaCVSS 6,1İstismar yokEPSS %1

    typora · typora19 Ağu 2021

  • CVE-2020-21058
    24İzleyin

    Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax.

    OrtaCVSS 6,1İstismar yokEPSS %1

    typora · typora20 Haz 2023

  • CVE-2023-39703
    24İzleyin

    A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora1 Eyl 2023

  • CVE-2022-40011
    24İzleyin

    Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then us

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora23 Ara 2022

  • CVE-2024-41481
    24İzleyin

    Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora12 Ağu 2024

  • CVE-2024-31783
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora16 Nis 2024

  • CVE-2022-43668
    24İzleyin

    Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora7 Ara 2022

  • CVE-2024-41482
    24İzleyin

    Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora12 Ağu 2024

  • CVE-2024-31784
    24İzleyin

    An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted pay

    OrtaCVSS 6,1İstismar yokEPSS %0

    typora · typora16 Nis 2024