Lucene search
+L

135 matches found

OSV
OSV
added 2022/03/15 12:01 a.m.16 views

GHSA-MG5H-9RHQ-4CQX Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00547EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:01 a.m.36 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

6.3CVSS2.8AI score0.00547EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:01 a.m.28 views

GHSA-82J4-VR25-X394 Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00547EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/15 12:01 a.m.19 views

GHSA-MW75-QVFR-HPMR Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00641EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:01 a.m.38 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

6.3CVSS3.1AI score0.00547EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:01 a.m.29 views

GHSA-QQ74-VGCF-54C3 Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting via viva cshtm file upload in in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00819EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:01 a.m.30 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting via viva cshtm file upload in in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

9CVSS3.2AI score0.00819EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:00 a.m.36 views

GHSA-RPHC-H572-2X9F Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

9CVSS5.2AI score0.00853EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:00 a.m.42 views

Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

9CVSS3.4AI score0.00853EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:00 a.m.36 views

GHSA-PCCM-J6VJ-JWWF Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webma file upload...

5.4CVSS5.1AI score0.00902EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.11 views

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .aspx file extensions in the application's file upload functionality. An attacker could use this...

9.4CVSS5.8AI score0.00752EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.11 views

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc versions prior to 2.10.4 have a security vulnerability that stems from the application allowing the upload of .ofd files, which leads to a cross-site scripting vulnerability. No detailed vulnerability details...

9CVSS5.2AI score0.00902EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.9 views

showdoc 代码问题漏洞

showdoc is open source a great tool for IT teams to share documents online. A code issue vulnerability exists in showdoc before 2.10.4, which stems from unrestricted file uploads...

6.5CVSS6.3AI score0.00634EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/15 12:00 a.m.14 views

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .ofd file extensions in the application's file upload feature. An attacker could use this vulnerability to...

6.9CVSS5.8AI score0.03262EPSS
SaveExploits4References7
Prion
Prion
added 2022/03/14 4:15 p.m.15 views

Cross site scripting

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4...

3.5CVSS5.3AI score0.00902EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/14 3:30 p.m.37 views

CVE-2022-0962 Stored XSS viva .webma file upload in star7th/showdoc

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4...

9CVSS5.5AI score0.00902EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/14 3:15 p.m.11 views

CVE-2022-0960

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4...

9CVSS6.8AI score0.00853EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/14 2:45 p.m.23 views

CVE-2022-0960 Stored XSS viva .properties file upload in star7th/showdoc

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4...

9CVSS7.4AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/14 2:15 p.m.9 views

CVE-2022-0946

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...

9CVSS6.8AI score0.00819EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/14 11:15 a.m.9 views

CVE-2022-0940

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4...

6.3CVSS6.2AI score0.00547EPSS
SaveExploits1References3
Rows per page
Query Builder