Browse CVEs

MEDIUM 6.1 CVE-2024-41482 Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component. Typora 1.9.3+ Fix from $1,6002024-08-12 MEDIUM 6.1 CVE-2024-41481 Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component. Typora 1.9.3+ Fix from $1,6002024-08-12 HIGH 7.3 CVE-2024-33300 Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrar… Typora after 1.7.0 Fix from $1,9502024-05-01 MEDIUM 6.1 CVE-2024-31783 Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted script d… Typora after 1.6.7 Fix from $1,6002024-04-16 MEDIUM 6.1 CVE-2024-31784 An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to t… Typora after 1.8.10 Fix from $1,6002024-04-16 HIGH 7.4 CVE-2020-18336 Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file exporting… Typora No fix yet Fix from $1,9502023-10-10 MEDIUM 6.1 CVE-2023-39703 A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading… Typora 1.6.7+ Fix from $1,6002023-09-01 MEDIUM 6.5 CVE-2023-2971 Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote w… Typora after 1.6.7 Fix from $1,6002023-08-19 CRITICAL 9.6 CVE-2023-2317 DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in t… Typora 1.6.7+ Fix from $2,3002023-08-19 HIGH 7.4 CVE-2023-2316 Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web s… Typora 1.6.7+ Fix from $1,9502023-08-19 MEDIUM 6.1 CVE-2020-21058 Cross Site Scripting vulnerability in Typora v.0.9.79 allows a remote attacker to execute arbitrary code via the mermaid sytax. Typora Patch available Fix from $1,6002023-06-20 HIGH 7.8 CVE-2023-1003 A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH J… Typora after 1.5.5 Fix from $1,9502023-03-07 MEDIUM 6.1 CVE-2022-40011 Typora through 1.3.8 allows XSS if a document containing an SVG element with an attacker-controlled onload attribute is exported and then used at a v… Typora after 1.3.8 Fix from $1,6002022-12-23 MEDIUM 6.1 CVE-2022-43668 Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when… Typora 1.4.4+ Fix from $1,6002022-12-07 MEDIUM 6.1 CVE-2020-18748 Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in th… Typora No fix yet Fix from $1,6002021-08-19 MEDIUM 6.1 CVE-2020-18221 Cross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute arbitrary code by injecting commands during block renderi… Typora after 0.9.65 Fix from $1,6002021-05-26 MEDIUM 6.1 CVE-2020-18737 An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution. Typora No fix yet Fix from $1,6002021-02-05 CRITICAL 9.6 CVE-2019-20374 A mutation cross-site scripting (XSS) issue in Typora through 0.9.9.31.2 on macOS and through 0.9.81 on Linux leads to Remote Code Execution through … Typora after 0.9.81 Fix from $2,3002020-01-09 HIGH 7.8 CVE-2019-12172 Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by… Typora No fix yet Fix from $1,9502019-05-17 HIGH 7.8 CVE-2019-12137EPSS 6% Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note. Typora No fix yet Fix from $1,9502019-05-16 MEDIUM 6.1 CVE-2019-7295 typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula. Typora after 0.9.63 Fix from $1,6002019-01-31 MEDIUM 6.1 CVE-2019-7296 typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula. Typora after 0.9.64 Fix from $1,6002019-01-31 MEDIUM 6.1 CVE-2019-6803 typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar. Typora No fix yet Fix from $1,6002019-01-25