Known Vulnerabilities for Notes by Hcltech
Listed below are 10 of the newest known vulnerabilities associated with "Notes" by "Hcltech".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114396 json | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject co... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114394 json | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attribu... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-113676 json | Froxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get API command that allows re... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111938 json | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-111915 json | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrar... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-111676 json | Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111602 json | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sens... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-111166 json | libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to r... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-110875 json | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed da... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-110772 json | Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create... | Not Provided | 2026-10-14 | 2026-10-14 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 | |||
| Application | Hcltech | Notes | 9.0.1 |