Lucene search
+L

882 matches found

Prion
Prion
•added 2023/02/15 5:15 a.m.•29 views

Cross site scripting

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

5.8CVSS5.9AI score0.00534EPSS
SaveExploits1References3
CVE
CVE
•added 2023/02/15 5:00 a.m.•101 views

CVE-2022-25978

CVE-2022-25978 affects all versions of github.com/usememos/memos/server. The root cause is insufficient checks on external resources, allowing attackers to introduce links starting with the javascript: scheme and trigger Cross-site Scripting (XSS). The provided documents consistently describe XSS...

6.1CVSS6.3AI score0.00534EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2023/02/15 5:00 a.m.•8 views

CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

6.1CVSS0.00534EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2023/02/15 5:00 a.m.•5 views

CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

5.4CVSS5.9AI score0.00534EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/15 12:00 a.m.•4 views

PT-2023-12845

Name of the Vulnerable Software and Affected Versions github.com/usememos/memos/server versions prior to 0.11.0 Description The issue is related to Cross-site Scripting XSS due to insufficient checks on external resources. This allows malicious actors to introduce links starting with a javascript...

6.1CVSS0.00534EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2023/02/15 12:00 a.m.•23 views

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos that stems from insufficient inspection of external resources. An attacker could exploit the vulnerability to perform a cross-site scripting attack...

6.1CVSS5.9AI score0.00534EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/15 12:00 a.m.•6 views

CVE-2022-25978: Improper Neutralization of Input During Web Page Generation

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting XSS due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme...

6.1CVSS5.8AI score0.00534EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/01/30 12:00 a.m.•16 views

Memos 跨站脚本漏洞

Memos is a Memos open source open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in Memos version 0.9.1, which stems from the inclusion of a stored cross-site scripting vulnerability...

9.8CVSS8AI score0.00444EPSS
SaveExploits1References2
CNVD
CNVD
•added 2023/01/13 12:00 a.m.•70 views

memos cross-site scripting vulnerability (CNVD-2023-05747)

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from the fact that it allows link tagging without validation, which could be exploited by an attacker to implement cross-si...

9CVSS3.6AI score0.00663EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/01/13 12:00 a.m.•66 views

memos cross-site scripting vulnerability (CNVD-2023-05748)

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from its csp being too simple to allow an attacker to bypass. No detailed vulnerability details are available at this time...

7.1CVSS3.2AI score0.00512EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2023/01/07 6:30 a.m.•54 views

GHSA-PCVH-PX2P-VMXW usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

5.4CVSS5.3AI score0.00512EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/01/07 6:30 a.m.•36 views

usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

6.5CVSS5.2AI score0.00512EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/01/07 4:15 a.m.•32 views

CVE-2023-0106

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

9CVSS6AI score0.00663EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/07 4:15 a.m.•36 views

CVE-2023-0107

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

6.5CVSS5.5AI score0.00512EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/07 4:15 a.m.•38 views

CVE-2023-0110

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

7.1CVSS5.8AI score0.00512EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/07 4:15 a.m.•38 views

CVE-2023-0112

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

7.6CVSS5.8AI score0.00592EPSS
SaveExploits1References2
Prion
Prion
•added 2023/01/07 4:15 a.m.•26 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

6CVSS5.3AI score0.00512EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/01/07 4:15 a.m.•19 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

5.8CVSS5.3AI score0.00512EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/01/07 4:15 a.m.•19 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

6.5CVSS5.3AI score0.00592EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2023/01/07 12:00 a.m.•36 views

CVE-2023-0111 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

5.4CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder