Lucene search
+L

471 matches found

Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.23 views

Stored Cross-site Scripting in showdoc

ShowDoc is a tool for an IT team to share documents online. showdoc contains a stored cross-site scripting vulnerability in the File Library page when uploading a file in .ofd format in versions prior to 2.10.4. At this time, there is no known workaround. Users should update to version 2.10.4...

6.9CVSS1.8AI score0.03262EPSS
SaveExploits4References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.33 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .ofd file upload...

9CVSS2.5AI score0.00902EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.30 views

GHSA-V8MP-HHJQ-H4CJ Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .ofd file upload...

5.4CVSS5.1AI score0.00902EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/16 12:00 a.m.29 views

GHSA-XM3X-787M-P66R Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webmv file upload...

5.4CVSS5.1AI score0.00838EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/16 12:00 a.m.21 views

GHSA-3PG8-C473-W6RR Stored Cross-site Scripting in showdoc

ShowDoc is a tool for an IT team to share documents online. showdoc contains a stored cross-site scripting vulnerability in the File Library page when uploading a file in .ofd format in versions prior to 2.10.4. At this time, there is no known workaround. Users should update to version 2.10.4...

6.9CVSS5AI score0.03262EPSS
SaveExploits4References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.26 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

6.4CVSS2.5AI score0.00541EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.37 views

GHSA-G585-J55V-38H7 Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

5.4CVSS5.1AI score0.00541EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/03/16 12:00 a.m.56 views

showdoc has unspecified vulnerabilities (CNVD-2022-20150)

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

9CVSS1.9AI score0.00819EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.85 views

showdoc .shtml file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .shtml file extensions in the application's file upload feature. An attacker could use this vulnerability to...

6.3CVSS1.5AI score0.00547EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.62 views

showdoc has unspecified vulnerabilities (CNVD-2022-20152)

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

9CVSS1.9AI score0.00902EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.24 views

showdoc .properties file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .properties file extensions in the application's file upload feature. An attacker could exploit this...

9CVSS1.3AI score0.00853EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.85 views

showdoc .aspx file upload vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability, which stems from the lack of valid detection of .aspx file extensions in the application's file upload feature. An attacker could exploit this...

6.3CVSS1.6AI score0.00547EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.18 views

showdoc .xsl file upload vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xsl file extensions in the application's file upload feature. An attacker could exploit this...

7.3CVSS1.4AI score0.00619EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/16 12:00 a.m.14 views

showdoc .xxhtml file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .xxhtml file extensions in the application's file upload feature. An attacker could exploit this...

7.1CVSS1.3AI score0.00641EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/15 4:15 p.m.9 views

CVE-2022-0966

Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10...

6.4CVSS6.3AI score0.00541EPSS
SaveExploits1References3
NVD
NVD
added 2022/03/15 4:15 p.m.13 views

CVE-2022-0967

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4...

6.9CVSS0.03262EPSS
SaveExploits4References3
ATTACKERKB
ATTACKERKB
added 2022/03/15 4:15 p.m.8 views

CVE-2022-0967

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4...

6.9CVSS6.3AI score0.03262EPSS
SaveExploits4References4
NVD
NVD
added 2022/03/15 4:15 p.m.25 views

CVE-2022-0966

Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10...

6.4CVSS0.00541EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/15 4:15 p.m.30 views

CVE-2022-0964

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4...

8CVSS0.00838EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/15 4:15 p.m.24 views

CVE-2022-0965

Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4...

9CVSS0.00902EPSS
SaveExploits1References2
Rows per page
Query Builder