Lucene search
+L

192 matches found

Openbugbounty
Openbugbounty
added 2017/09/25 5:25 p.m.10 views

memo-log.com XSS vulnerability

Vulnerable URL: http://www.memo-log.com/agency.php?lang=fr"bg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

6.3AI score
SaveExploits0
OSV
OSV
added 2017/08/29 1:35 a.m.6 views

CVE-2017-2256

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...

5.4CVSS5.9AI score0.00538EPSS
SaveExploits0References2
NVD
NVD
added 2017/08/29 1:35 a.m.21 views

CVE-2017-2256

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...

5.4CVSS5.3AI score0.00538EPSS
SaveExploits0References2
Prion
Prion
added 2017/08/29 1:35 a.m.21 views

Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...

3.5CVSS5.5AI score0.00538EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2017/08/28 8:0 p.m.24 views

CVE-2017-2256

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...

5.7AI score0.00538EPSS
SaveExploits0References2
CVE
CVE
added 2017/08/28 8:0 p.m.54 views

CVE-2017-2256

CVE-2017-2256 affects Cybozu Garoon 3.0.0 to 4.2.5, with a stored cross-site scripting (XSS) vulnerability in the Rich text functionality of the Memo application that can cause arbitrary script execution in the user’s browser. The issue is documented across multiple sources (NVD/NVD CVE entry; JV...

5.4CVSS5.7AI score0.00538EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/08/22 12:0 a.m.7 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25384)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

5.4CVSS5.3AI score0.00538EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/08/21 5:30 a.m.6 views

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Stored cross-site scripting in the "Rich text" function of the application "Space" CWE-79 -...

6.1CVSS6.1AI score0.01326EPSS
SaveExploits0References19
CNVD
CNVD
added 2016/09/03 12:0 a.m.6 views

ZKTeco ZKAccess Security System 5.3.1 Persistent Cross-Site Scripting Vulnerability

ZKBioSecurity is a comprehensive management platform for biometric security. ZKTeco ZKAccess Security System 5.3.1 persistent cross-site scripting vulnerability, which occurs due to failure to properly validate the "HOLIDAYNAME" and POST submit "memo" parameters when passing them to the user. The...

6.3AI score
SaveExploits0References1
Zero Science Lab
Zero Science Lab
added 2016/08/31 12:0 a.m.134 views

ZKTeco ZKAccess Security System 5.3.1 Stored XSS Vulnerability

Summary ZKAccess Systems are built on flexible, open technology to provide management, real-time monitoring, and control of your access control system-all from a browser, with no additional software to install. Our secure Web-hosted infrastructure and centralized online administration reduce your...

7.2CVSS6.1AI score0.00259EPSS
SaveExploits1
hackapp
hackapp
added 2016/04/03 11:29 a.m.12 views

Memo Pad - Simple & Stylish - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Memo Pad - Simple & Stylish published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:20 a.m.12 views

Memo fun - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Memo fun published at the 'play' market has multiple vulnerabilities...

1.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 10:18 a.m.17 views

Princess Games for Kids - Memo - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Princess Games for Kids - Memo published at the 'play' market has multiple vulnerabilities...

1.5AI score
SaveExploits0References1Affected Software1
Vulnerability Lab
Vulnerability Lab
added 2016/02/10 12:0 a.m.39 views

MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

7.1AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
added 2016/02/10 12:0 a.m.28 views

MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

7.4AI score
SaveExploits0
Prion
Prion
added 2014/09/09 10:55 a.m.9 views

Design/Logic Flaw

The SomNote - Journal/Memo aka com.somcloud.somnote application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/09 10:0 a.m.17 views

CVE-2014-5706

The SomNote - Journal/Memo aka com.somcloud.somnote application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
added 2014/09/09 10:0 a.m.33 views

CVE-2014-5706

The CVE-2014-5706 issue affects the SomNote – Journal/Memo (com.somcloud.somnote) Android app (version 2.1.5). The root cause is the app’s failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate. The affec...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2014/08/25 12:0 a.m.35 views

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/08/25 12:0 a.m.36 views

Air Transfer Iphone 1.3.9 Arbitrary File Download

Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

7.4AI score
SaveExploits0
Rows per page
Query Builder