Lucene search
+L

877 matches found

CVE
CVE
•added 2022/12/29 12:00 a.m.•99 views

CVE-2022-4844

CVE-2022-4844 affects usememos/memos prior to 0.9.1. A CSRF vulnerability exists in the web app that could allow an attacker to induce authenticated actions (e.g., creating a HOST user) without user consent. Exploitation details are provided in Huntr’s PoC and related advisories, with remediation...

8.8CVSS6.9AI score0.00308EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/12/29 12:00 a.m.•3 views

CVE-2022-4844

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

8.8CVSS0.00308EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•2 views

CVE-2022-4848: Improper Verification of Source of a Communication Channel

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS5.8AI score0.00528EPSS
SaveExploits1References2
Mend
Mend
•added 2022/12/29 12:00 a.m.•2 views

CVE-2022-4845

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS0.00259EPSS
SaveExploits1References6
OSV
OSV
•added 2022/12/29 12:00 a.m.•28 views

CVE-2022-4844 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS6.9AI score
SaveExploits0References4
OSV
OSV
•added 2022/12/29 12:00 a.m.•29 views

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•2 views

CVE-2022-4840: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

7.6CVSS5.8AI score0.00652EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•4 views

CVE-2022-4844: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

8.8CVSS5.8AI score0.00308EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4846: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS5.8AI score0.00256EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4841: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS5.8AI score0.00601EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/29 12:00 a.m.•18 views

memos 跨站请求伪造漏洞

memos is an open source hosted meme center with knowledge management and social features. memos suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to post on behalf of victims...

8.3CVSS6.7AI score0.00346EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•2 views

CVE-2022-4851: Improper Handling of Values

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS5.8AI score0.00772EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4847: Incorrectly Specified Destination in a Communication Channel

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS5.8AI score0.00642EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4849: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS5.8AI score0.00346EPSS
SaveExploits1References2
Mend
Mend
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4846

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS0.00256EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/12/29 12:00 a.m.•38 views

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS5AI score0.00259EPSS
SaveExploits1References2
Mend
Mend
•added 2022/12/29 12:00 a.m.•2 views

CVE-2022-4850

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

7.1CVSS0.00328EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4850: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.5CVSS5.8AI score0.00328EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4839: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8CVSS5.8AI score0.00766EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•1 views

CVE-2022-4845: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

6.7CVSS5.8AI score0.00259EPSS
SaveExploits1References2
Rows per page
Query Builder