Evernote の脆弱性情報
| 告知 | 公開日 | 重大度 | CVE |
|---|---|---|---|
Fixed a stored cross site scripting (XSS) vulnerability in modified external web links. WINNOTE-20063 | — | — | — |
|
Fixed a vulnerability in the protocol handler, specifically Evernote client installed on Windows 10, 7 or 2008 can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. WINNOTE-19941 | — | — | — |
|
Fixed a stored cross site scripting (XSS) issue in rendering attachment filenames. WINNOTE-19568 | — | — | — |
|
Improved security by always generating HTTPS URLs to Evernote services. WINNOTE-19377 | — | — | — |
|
Fixed an issue in versions 6.4 - 6.7 where the app would send authentication tokens over HTTP when contacting certain portions of the Evernote Service. The vulnerability did not affect note content, usernames, or passwords and those continued to be securely encrypted in transit. WINNOTE-19299 | — | — | — |
|
Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. WINNOTE-15870 | — | — | — |
|
Fixed DLL hijacking/preloading vulnerabilities on installer and other binaries. WINNOTE-15637 | — | — | — |
|
Delete the local data in the original folder when the local folder configuration is changed. WINNOTE-14610 | — | — | — |
|
Fixed several stored XSS (cross-site scripting) issues in activity view and other web views. WINNOTE-13340 | — | — | — |
|
Added a warning to users before opening local files. WINNOTE-8997 | — | — | — |
|
Fixed a potential stored cross site scripting (XSS) issue in releated search results. SAFARICLIP-992 | — | — | — |
|
Added com.apple.quarantine attribute to attachment files to prevent potential one click execution. MACOSNOTE-28956 | — | — | — |
|
Fixed a potential dylib hijacking issue. MACOSNOTE-28914 | — | — | — |
|
Fixed a regression and added the prompt before opening any file:// URIs. MACOSNOTE-28840 | — | — | — |
|
Fixed a local file path traversal issue on attachment previewing. MACOSNOTE-28634 | — | — | — |
|
Improved NSConnection usage with NSProtocolChecker to protect the cross application IPC channel. MACOSNOTE-18729 | — | — | — |
|
Added a prompt before opening any file:// URIs. MACOSNOTE-12400 | — | — | — |
|
Updated adonit SDK to fetch all web content through HTTPS. IOSPENULT-4056 | — | — | — |
|
Fixed a PIN lock bypass issue. IOSNOTE-28074 | — | — | — |
|
Fixed an issue that saved screenshot might show up prior to PIN lock screen for a short time period. IOSNOTE-27747 | — | — | — |
|
Updated the keychain items accessibility attribute in iTunes/iCloud backups. IOSNOTE-22342 | — | — | — |
|
Fixed the WebViews that disables same-origin policy using file:// URLs. IOSNOTE-19688 | — | — | — |
|
Upgraded vulnerable SDWebImage library to 3.7.2. IOSNOTE-19338 | — | — | — |
|
Upgraded vulnerable SDWebImage library to 3.7.2. IOSFOOD-4320 | — | — | — |
|
Fixed an issue that PIN lock can be bypassed. EFB-1836 | — | — | — |
|
Fixed an issue where the ClipActivity activity may be exploited through malicious Intent. DRDNOTE-31090 | — | — | — |
|
Fixed an issue where the AuthorizeThirdPartyAppActivity activity may be exploited through malicious Intent. DRDNOTE-31089 | — | — | — |
|
Fixed an issue where the URIBrokerActivity activity may be exploited through a malicious Intent. DRDNOTE-31088 | — | — | — |
|
Fixed an issue where the ContractNoUiActivity activity may be exploited through a malicious Intent. DRDNOTE-31087 | — | — | — |
|
Fixed an issue where the NewPhoneMainActivity activity may be exploited through a malicious Intent. DRDNOTE-31086 | — | — | — |
|
Fixed an issue where the Widget4x1SettingsActivity/Widget4x2SettingsActivity activities may be exploited through a malicious Intent. DRDNOTE-31085 | — | — | — |
|
Fixed an issue in an exported Activity that might be exploited through malicious Intent. DRDNOTE-31033 | — | — | — |
|
Fixed an issue where certain third party content providers were identified by their package names rather than package signatures. DRDNOTE-30711 | — | — | — |
|
Fixed a PIN lock bypass issue. DRDNOTE-30589 | — | — | — |
|
Fixed a PIN lock bruteforcing issue. DRDNOTE-24142 | — | — | — |
|
Fixed a potential stored cross site scripting (XSS) issue on Google Drive integration. DRDNOTE-23054 | — | — | — |
|
Fixed an issue that some WebView could ignore SSL certificate errors in debug/internal builds. DRDNOTE-20842 | — | — | — |
|
Fixed a PIN lock bypass issue. DRDNOTE-20794 | — | — | — |
|
Move notes stored in SD card to internal memory. DRDNOTE-9500 | — | — | — |
|
Fixed a security issue reported by Google. CLIPPER-4170 | — | — | — |
|
Fixed several issues by validating events, adding clickjacking protection and etc. CLIPPER-3073 | — | — | — |
|
Fixed an issue that could cause browser's same origin policy to be bypassed. CLIPPER-2582 | — | — | — |
|
Fixed an issue regarding automated notebook suggestions. CLIPPER-1371 | — | — | — |
|
Fixed a stored XSS (cross-site scripting) issue in Related Context by properly rendering the context note snippet. CE-735 | — | — | — |
|
Fixed a potential cross site scripting (XSS) issue. CC-3860 | — | — | — |
|
Fixed a potential cross site scripting (XSS) issue while clipping from a malicious site. CC-2561 | — | — | — |
|
Fixed a potential HTML injection issue through the extension's login page. CC-1729 | — | — | — |
|
Fixed a potential stored cross site scripting (XSS) issue in releated search results. CC-1693 | — | — | — |
こちらで見つけた日
まだ来ていない日付