https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:30:31.813591+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365118 EUVD-2026-365118 2026-10-07T21:30:31.875634+00:00 EUVD-2026-365118 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78325 fkie_cve-2026-78325 2026-10-07T21:30:31.875679+00:00

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and note data, and arbitrary invocation of native device APIs.

 https://cve.radiocsirt.org/vuln/ghsa-3799-7g8h-9xh6 GHSA-3799-7g8h-9xh6 2026-10-07T21:30:31.875715+00:00

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and note data, and arbitrary invocation of native device APIs.