Atom - vulnerabilities (CVEs)

6 CVEs in 2 products, 0 in the last 30 days, newest from 2023-09-06.

Products

• Electron - 4 CVEs
• Photoblog - 2 CVEs

Newest CVEs of Atom

• CVE-2023-23623 - CVSS 9.8 (critical), 2023-09-06: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Content-Security-Policy that disables eval,…
• CVE-2018-1000006 - CVSS 8.8 (high), 2018-01-24: GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron…
• CVE-2017-1000424 - CVSS 4.3 (medium), 2018-01-02: Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs…
• CVE-2016-1202 - CVSS 7.8 (high), 2016-04-25: Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent…
• CVE-2007-3135 - CVSS 4.3 (medium), 2007-06-08: Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or…
• CVE-2007-3134 - CVSS 4.3 (medium), 2007-06-08: Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web…