7 Total advisories
7 Vulnerabilities
0 Malware
Vulnerabilities
UNKNOWN
CVE-2026-44522
Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leads to Remote Code Execution
CRITICAL 10.0
CVE-2026-44523
Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery
CRITICAL 9.4
CVE-2026-41571
Note Mark: OIDC-registered users authenticated by submitting password "null"
MEDIUM 5.3
CVE-2026-41572
Note Mark: Unauthenticated read of notes and assets in soft-deleted public books
LOW 3.7
CVE-2026-40263
Note Mark: Username Enumeration via Login Endpoint Timing Side-Channel
MEDIUM 5.9
CVE-2026-40265
Note Mark has Broken Access Control on Asset Download
HIGH 8.7
CVE-2026-40262
Note Mark has Stored XSS via Unrestricted Asset Upload
Ready to move
Start Securing
Free, no credit card | First findings in minutes