506 matches found
Insecure Direct Object References(IDOR)
github.com/usememos/memos is vulnerable to insecure direct object references. Improper Authorization due to insecure direct object references allow an attacker to trigger the Reset API on user's behalf...
Information Disclosure
github.com/usememos/memos is vulnerable to information disclosure. A remote authenticated attacker is able to view any content from private memos from other users via the API...
Insecure Direct Object References(IDOR)
github.com/usememos/memos is vulnerable to insecure direct object references. The vulnerability allows an attacker to delete all the available memos Public/Private in the entire application since the memos id is numeric & is sequentially incremented which is easy to guess and perform the attack...
usememos/memos vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4866
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865
The CVE-2022-4865 entry concerns a Cross-site Scripting (XSS) vulnerability stored in the GitHub repository usememos/memos prior to version 0.9.1. Affected component is the memos web application; the underlying issue is stored XSS. In the connected documents, the vulnerability is consistently des...
CVE-2022-4866
The CVE-2022-4866 entry concerns the open-source project usememos/memos, where a Stored Cross-site Scripting (XSS) vulnerability affects versions prior to 0.9.1. The vulnerability is described as XSS stored in the application (no specific exploit vector details provided in the documents). Support...
CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
GHSA-6WHJ-8G9G-5JVX usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...
Cross-site Request Forgery (CSRF)
github.com/usememos/memos is vulnerable to cross site request forgery. The vulnerability exists in the NewServer function in server.go, which allows an attacker to manipulate the actions of authenticated users by tricking them into clicking on a malicious link or visiting a malicious website whil...
PT-2022-28148 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of insufficient permissions or privileges. There is no information provided about the estimated number of potentially affected devices worldwide or...
GHSA-CWRM-33QQ-4W2X usememos/memos Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...
GHSA-642Q-2Q68-9J3P usememos/memos Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...
GHSA-5JQP-WMHJ-G33F usememos/memos Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...