{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-12T06:52:19.809","vulnerabilities":[{"cve":{"id":"CVE-2020-11826","sourceIdentifier":"cve@mitre.org","published":"2020-04-16T19:15:27.680","lastModified":"2024-11-21T04:58:42.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. However, these notes are stored in a database without encryption and an attacker can read the password-protected notes without having the password. Notes are stored in the ZENTITY table in the memono.sqlite database."},{"lang":"es","value":"Los usuarios pueden bloquear sus notas con una contraseña en Memono versión 3.8. Por lo tanto, los usuarios necesitan saber una contraseña para leer notas. Sin embargo, estas notas son almacenadas en una base de datos sin cifrado y un atacante puede leer las notas protegidas por contraseña sin tener la contraseña. Las notas son almacenadas en la tabla ZENTITY en la base de datos memono.sqlite."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appinghouse:memono:3.8:*:*:*:*:iphone_os:*:*","matchCriteriaId":"5965B64E-39F8-4119-A234-A86E6E7433B4"}]}]}],"references":[{"url":"https://fatihhcelik.blogspot.com/2020/02/memono-insecure-data-storage-ios.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://fatihhcelik.blogspot.com/2020/02/memono-insecure-data-storage-ios.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}