6602 matches found
CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802
The CVE-2022-4802 entry covers usememos/memos prior to 0.9.1, where an Authorization Bypass Through a User-Controlled Key is reported. Multiple connected sources describe it as Improper Authorization/IDOR-like behavior that could allow bypassing access controls to view, update, or delete shortcut...
CVE-2022-4800 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4803 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4804 Improper Authorization in usememos/memos
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4814 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
GHSA-97RC-MM5J-F6RJ usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
rdiffweb Improper Access Control vulnerability
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...
usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
GHSA-V92P-PHMP-XFFR usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
GHSA-2WPW-CM9W-V4XM rdiffweb vulnerable to Business Logic Errors
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5...
GHSA-C2V4-8R9G-G5XJ usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
GHSA-M8R9-QXX8-MRXP rdiffweb Improper Access Control vulnerability
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...
usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
usememos/memos vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
usememos/memos Denial of Service vulnerability
Denial of Service in GitHub repository usememos/memos 0.9.0 and prior. A patch is available on the main branch at commit number f888c628408501daf639de07b90a72ab443b0f4c...
GHSA-33M8-F4HW-WM3Q usememos/memos Denial of Service vulnerability
Denial of Service in GitHub repository usememos/memos 0.9.0 and prior. A patch is available on the main branch at commit number f888c628408501daf639de07b90a72ab443b0f4c...
CVE-2022-4733
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...