GHSA-F552-97QX-C694 usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

usememos/memos makes Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

usememos/memos vulnerable to improper access control

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

usememos/memos Improper Access Control vulnerability

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

GHSA-FV6C-RFG3-GVJW usememos/memos makes Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

GHSA-QR52-59R6-49F4 usememos/memos Improper Access Control vulnerability

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4689

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4690

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4688

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4687

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4684

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

Authorization

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4665

Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6...

UBUNTU-CVE-2022-4665

Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6...

CVE-2022-3805

creationtimestamp| type| source ---|---|--- 2022-12-23 00:14:02+00:00| seen| https://t.me/cibsecurity/55199 2025-09-24 08:20:29+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/passive/cves/2022/CVE-2022-3805.yaml...

CVE-2022-4723

rdiffweb (ikus060/rdiffweb) prior to version 2.5.5 is affected by an absence of rate limiting on the resend email feature when enabling or disabling 2FA via the /prefs/mfa endpoint. This can allow resource allocation without limits, as described across multiple sources. Affected component is the ...