Vulnerabilities

TI-2018-15668 CVE-2018-1000006 · GHSA-w222-53c6-c86p

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier…

HIGH 80

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom prot…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.88842 Published 2018-01-24 Fixed in 1.7.11, 1.6.16 +1 CWE-78

TI-2017-14643 CVE-2017-1000424 · GHSA-6h98-cf9g-vmg2

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing…

LOW 22

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00982 Published 2018-01-02 Fixed in 1.7.6 CWE-290

TI-2016-01101 CVE-2016-1202 · GHSA-gvcj-pfq2-wxj7

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to…

LOW 34

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00431 Published 2016-04-25 Fixed in 0.33.5 CWE-426

TI-2007-03032 CVE-2007-3135 · GHSA-3fwf-33ww-5w45

Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and…

LOW 23

Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01365 Published 2007-06-08 No fix listed

TI-2007-03031 CVE-2007-3134 · GHSA-fp29-9qg5-fwm3

Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom…