699 matches found
Cross-site Scripting (XSS)
github.com/usememos/memos is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly validate the markdown links, which allows an attacker to inject and execute malicious javascript...
PT-2023-4209 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: The issue is related to insufficient access control in the Voice Memos component of the macOS operating system. It may allow an attacker to gain unauthorized access to sensitive information. The...
GO-2023-1566 Cross site scripting in github.com/usememos/memos
A malicious actor can introduce links starting with a "javascript:" scheme due to insufficient checks on external resources. This can be used as a part of Cross-site Scripting XSS attack...
Cross Site Scripting in usememos/memos
All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...
GHSA-9W8X-5HV5-R6GW Cross Site Scripting in usememos/memos
All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...
CVE-2022-25978
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...
Cross site scripting
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...
CVE-2022-25978
CVE-2022-25978 affects all versions of github.com/usememos/memos/server. The root cause is insufficient checks on external resources, allowing attackers to introduce links starting with the javascript: scheme and trigger Cross-site Scripting (XSS). The provided documents consistently describe XSS...
CVE-2022-25978
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...
memos 跨站脚本漏洞
memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos that stems from insufficient inspection of external resources. An attacker could exploit the vulnerability to perform a cross-site scripting attack...
Memos 跨站脚本漏洞
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in Memos version 0.9.1, which stems from the inclusion of a stored cross-site scripting vulnerability...
memos cross-site scripting vulnerability (CNVD-2023-05747)
memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from the fact that it allows link tagging without validation, which could be exploited by an attacker to implement cross-si...
memos cross-site scripting vulnerability (CNVD-2023-05748)
memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from its csp being too simple to allow an attacker to bypass. No detailed vulnerability details are available at this time...
usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
GHSA-PCVH-PX2P-VMXW usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
CVE-2023-0106
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
CVE-2023-0110
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...
CVE-2023-0112
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...