Lucene search
+L

877 matches found

CVE
CVE
•added 2022/12/31 12:00 a.m.•98 views

CVE-2022-4865

The CVE-2022-4865 entry concerns a Cross-site Scripting (XSS) vulnerability stored in the GitHub repository usememos/memos prior to version 0.9.1. Affected component is the memos web application; the underlying issue is stored XSS. In the connected documents, the vulnerability is consistently des...

9CVSS7.7AI score0.00991EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/31 12:00 a.m.•4 views

CVE-2022-4865: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

9CVSS5.8AI score0.00991EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/31 12:00 a.m.•26 views

CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS8.6AI score
SaveExploits0References4
OSV
OSV
•added 2022/12/30 6:30 p.m.•51 views

GHSA-6WHJ-8G9G-5JVX usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS6.7AI score0.00679EPSS
SaveExploits1References4
Veracode
Veracode
•added 2022/12/30 8:06 a.m.•27 views

Cross-site Request Forgery (CSRF)

github.com/usememos/memos is vulnerable to cross site request forgery. The vulnerability exists in the NewServer function in server.go, which allows an attacker to manipulate the actions of authenticated users by tricking them into clicking on a malicious link or visiting a malicious website whil...

6.5CVSS6.1AI score0.00338EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/12/30 12:00 a.m.•17 views

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.9.1, which stems from insufficient privileges or improper handling of privileges...

8.4CVSS7.1AI score0.00679EPSS
SaveExploits1References3
Mend
Mend
•added 2022/12/30 12:00 a.m.•1 views

CVE-2022-4863

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS0.00679EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/12/30 12:00 a.m.•5 views

PT-2022-28148 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of insufficient permissions or privileges. There is no information provided about the estimated number of potentially affected devices worldwide or...

8.4CVSS8.4AI score0.00679EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•2 views

CVE-2022-4863: Improper Handling of Insufficient Permissions or Privileges

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

8.4CVSS5.8AI score0.00679EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/12/29 6:30 p.m.•36 views

usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS5.1AI score0.00266EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/29 6:30 p.m.•35 views

usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS5.2AI score0.00619EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/29 6:30 p.m.•35 views

usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

8.3CVSS6.4AI score0.00356EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/12/29 6:30 p.m.•76 views

GHSA-642Q-2Q68-9J3P usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

6.5CVSS6.8AI score0.00356EPSS
SaveExploits1References4
OSV
OSV
•added 2022/12/29 6:30 p.m.•20 views

GHSA-5JQP-WMHJ-G33F usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

8.8CVSS7.6AI score0.00316EPSS
SaveExploits1References4
OSV
OSV
•added 2022/12/29 6:30 p.m.•71 views

GHSA-CWRM-33QQ-4W2X usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

6.5CVSS6.4AI score0.00264EPSS
SaveExploits1References4
OSV
OSV
•added 2022/12/29 6:30 p.m.•61 views

GHSA-GW9M-2M5V-C6X5 usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

4.3CVSS4.8AI score0.00266EPSS
SaveExploits1References4
NVD
NVD
•added 2022/12/29 6:15 p.m.•25 views

CVE-2022-4845

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS0.00266EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/29 6:15 p.m.•47 views

CVE-2022-4846

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS0.00264EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/29 6:15 p.m.•34 views

CVE-2022-4844

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

8.8CVSS0.00316EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/29 6:15 p.m.•36 views

CVE-2022-4850

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS0.00338EPSS
SaveExploits1References2
Rows per page
Query Builder