Lucene search
K

180 matches found

RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

6.1CVSS5.8AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-34018

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

5.8AI score0.0004EPSS
Exploits0References3
NVD
NVD
added 3 days ago12 views

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

6.1CVSS0.0004EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 3 days ago3 views

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

5.8AI score0.0004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 3 days ago7 views

PT-2026-45825

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE SCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

5.8AI score0.0004EPSS
Exploits0References3
CVE
CVE
added 3 days ago10 views

CVE-2026-30586

This CVE concerns Cross Site Scripting in the open-source project usememos Memos v0.26.0. The vulnerability affects the memo rendering path and related views (SANITIZE_SCHEMA, Memo Rendering Component, and Public/Private Memo View pages). Root cause details are not explicitly provided beyond the ...

6.1CVSS5.8AI score0.0004EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 3 days ago4 views

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

5.8AI score0.0004EPSS
Exploits0References3
Cvelist
Cvelist
added 3 days ago25 views

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

0.0004EPSS
Exploits0References2
CNVD
CNVD
added 2026/04/14 12:0 a.m.2 views

Huawei HarmonyOS Memo Module Access Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An access control vulnerability exists in the Huawei HarmonyOS memoization module, which can be exploited by an attacker to cause confidentiality and...

6.5CVSS5.7AI score0.00004EPSS
Exploits0
EUVD
EUVD
added 2026/04/13 6:30 a.m.1 views

EUVD-2026-21802

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

4.1CVSS5.8AI score0.00004EPSS
Exploits0References3
NVD
NVD
added 2026/04/13 4:16 a.m.1 views

CVE-2026-34860

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

6.5CVSS0.00004EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/13 3:49 a.m.21 views

CVE-2026-34860

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

4.1CVSS0.00004EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/13 3:49 a.m.0 views

CVE-2026-34860

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

4.1CVSS5.8AI score0.00004EPSS
Exploits0References2
CVE
CVE
added 2026/04/13 3:49 a.m.13 views

CVE-2026-34860

Technical details about CVE-2026-34860 are not publicly available in the provided documents. Monitor for updates from vendors and security trackers to obtain affected products, impact specifics, and remediation.

6.5CVSS5.8AI score0.00004EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/13 3:49 a.m.0 views

CVE-2026-34860

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

4.1CVSS5.8AI score0.00004EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.3 views

PT-2026-32236

Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

4.1CVSS5.8AI score0.00004EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/16 3:30 p.m.1 views

EUVD-2016-10819

ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads through the 'holidayname' and 'memo' POST parameters. Attackers can submit crafted requests with script code i...

7.2CVSS6AI score0.00016EPSS
Exploits1References7
NVD
NVD
added 2026/03/16 2:17 p.m.1 views

CVE-2016-20032

ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads through the 'holidayname' and 'memo' POST parameters. Attackers can submit crafted requests with script code i...

7.2CVSS0.00016EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

ZKTeco ZKAccess Security System 跨站脚本漏洞

ZKTeco ZKAccess Security System is an access control and security management system developed by ZKTeco Technology. Version 5.3.1 of ZKTeco ZKAccess Security System contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of the holidayname and memo POST...

7.2CVSS5.9AI score0.00016EPSS
Exploits1References6
CVE
CVE
added 2026/03/15 1:35 p.m.8 views

CVE-2016-20032

The CVE-2016-20032 issue affects ZKTeco ZKAccess Security System version 5.3.1. A stored cross-site scripting vulnerability exists in which input supplied to the holiday_name and memo POST parameters is not properly sanitized, allowing an attacker to inject HTML/script that can be executed in a u...

7.2CVSS6AI score0.00016EPSS
Exploits1References6
Rows per page
Query Builder