CVE-2019-10038

概要

参考情報

• drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view · Broken Link
• evernote.com/security/updates · Vendor Advisory
• inputzero.io/2019/04/evernote-cve-2019-10038.html · Third Party Advisory

evernote のその他の脆弱性

• CVE-2023-50643緊急 9.8An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnsp…
• CVE-2020-17759高 8.8An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command …
• CVE-2013-5116高 7.1Evernote prior to 5.5.1 has insecure password change
• CVE-2013-5112中 4.6Evernote before 5.5.1 has insecure PIN storage
• CVE-2019-17051高 7.8Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demon…