Lucene search
+L

23 matches found

SUSE CVE
SUSE CVE
•added 2026/03/26 9:16 a.m.•16 views

SUSE CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

8.7CVSS6AI score0.00473EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/25 9:01 p.m.•19 views

CVE-2026-30587

A flaw was found in Seafile Server and its Seadoc editor. This Stored Cross-Site Scripting XSS vulnerability allows authenticated remote attackers to inject malicious JavaScript code. The application fails to properly sanitize WebSocket messages during document structure updates. By exploiting...

8.7CVSS6.3AI score0.00473EPSS
SaveExploits1References9
osv_ghsa
osv_ghsa
•added 2026/03/25 6:31 p.m.•27 views

GHSA-RQJ3-X344-QVXC Seafile Server has multiple stored XSS vulnerabilities

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

5.4CVSS6AI score0.00473EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2026/03/25 6:31 p.m.•28 views

Seafile Server has multiple stored XSS vulnerabilities

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

8.7CVSS6AI score0.00473EPSS
SaveExploits1References8Affected Software1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•22 views

EUVD-2026-15940

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

6AI score0.00473EPSS
SaveExploits1References7
NVD
NVD
•added 2026/03/25 6:16 p.m.•20 views

CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

8.7CVSS0.00473EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•10 views

CVE-2026-30587: Improper Neutralization of Input During Web Page Generation

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

8.7CVSS6AI score0.00473EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•65 views

Seafile Server security vulnerabilities

Seafile Server is an open-source cloud storage server software developed by Seafile, offering features for file synchronization, sharing, and collaboration management. Versions of Seafile Server such as 13.0.15, 13.0.16-pro, 12.0.14, and earlier have security vulnerabilities. These vulnerabilitie...

8.7CVSS6AI score0.00473EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2026/03/25 12:00 a.m.•9 views

CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

6AI score0.00473EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•61 views

PT-2026-28073

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

6AI score0.00473EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2026/03/25 12:00 a.m.•16 views

CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

6AI score0.00473EPSS
SaveExploits1References7
CVE
CVE
•added 2026/03/25 12:00 a.m.•109 views

CVE-2026-30587

CVE-2026-30587 affects Seafile Server and its Seadoc editor, with multiple stored XSS vulnerabilities exploited via WebSocket messages that update document structure. Affected versions include 13.0.15, 13.0.16-pro, and 12.0.14 and prior; fixes are in 13.0.17, 13.0.17-pro, and 12.0.20-pro. The iss...

8.7CVSS6AI score0.00473EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2026/03/25 12:00 a.m.•25 views

CVE-2026-30587

Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the Seadoc sdoc editor. The application fails to properly sanitize WebSocket messages regarding document structure updates. This allows...

5.4CVSS6AI score
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2014-5330

Malware in sbrugna...

7.8CVSS7.3AI score0.00416EPSS
SaveExploits0References6
NVD
NVD
•added 2018/03/19 9:29 p.m.•32 views

CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

7.8CVSS7.6AI score0.00416EPSS
SaveExploits0References5
Prion
Prion
•added 2018/03/19 9:29 p.m.•22 views

Code injection

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

4.6CVSS7.1AI score0.00416EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2018/03/19 9:00 p.m.•32 views

CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

7.6AI score0.00416EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2018/03/19 9:00 p.m.•40 views

CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

7.8CVSS7.7AI score0.00416EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/03/19 12:00 a.m.•7 views

PT-2018-4266

Name of the Vulnerable Software and Affected Versions Seafile Server versions prior to 3.1.2 Seafile Server Professional Edition versions prior to 3.1.0 Description The issue allows local users to gain privileges via vectors related to ccnet handling user accounts. Recommendations For Seafile...

7.8CVSS0.00416EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/19 12:00 a.m.•5 views

CVE-2014-5443: Undefined Security Weakness

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

7.8CVSS7.4AI score0.00416EPSS
SaveExploits0References2
Rows per page
Query Builder