Lucene search
+L

506 matches found

Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.2 views

PT-2022-28113 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to a Comparison of Object References Instead of Object Contents, which can lead to an Authorization Bypass Through User-Controlled Key. This allows for potential...

8.6CVSS8.5AI score0.00578EPSS
Exploits1References12
OSV
OSV
added 2022/12/28 12:0 a.m.23 views

CVE-2022-4806 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

8.2CVSS6.8AI score0.00756EPSS
Exploits1References4
OSV
OSV
added 2022/12/28 12:0 a.m.25 views

CVE-2022-4814 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.8AI score0.00534EPSS
Exploits1References4
OSV
OSV
added 2022/12/28 12:0 a.m.21 views

CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

7.3CVSS6.2AI score0.00507EPSS
Exploits1References4
OSV
OSV
added 2022/12/28 12:0 a.m.21 views

CVE-2022-4799 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS7.5AI score0.00762EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.8 views

PT-2022-28096 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue involves the incorrect use of privileged APIs, allowing a user with login permission to delete all notes of the whole application. This can be achieved via the API endpoint...

8.1CVSS8.1AI score0.00761EPSS
Exploits1References11
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.7 views

CVE-2022-4814 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS4.6AI score0.00534EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.2 views

PT-2022-28107 · Unknown +1 · Usememos/Memos +1

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an Improper Access Control vulnerability, allowing for authorization bypass through a user-controlled key. This can result in a user being able to delete others' publ...

8.2CVSS8.3AI score0.00756EPSS
Exploits1References25
Cvelist
Cvelist
added 2022/12/28 12:0 a.m.43 views

CVE-2022-4813 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS4.9AI score0.00534EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.8 views

CVE-2022-4811 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...

8.3CVSS8.3AI score0.00564EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.8 views

CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.2CVSS5.3AI score0.00681EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.4 views

CVE-2022-4806 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

8.2CVSS5.3AI score0.00756EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.4 views

CVE-2022-4810 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

6.3CVSS4.7AI score0.00465EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.5 views

PT-2022-28112 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue allows an unauthorized user to access any private memo by manipulating the URL of a memo on the editing screen. This is due to an Authorization Bypass Through User-Controlled Key...

8.3CVSS6.8AI score0.00564EPSS
Exploits1References14
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.6 views

PT-2022-28101 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns an improper verification of the source of a communication channel. This affects the usememos/memos GitHub repository. There is no information provided about the estimated...

8.6CVSS8.7AI score0.00586EPSS
Exploits1References10
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.6 views

CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

9.1CVSS5.5AI score0.00568EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.3 views

PT-2022-28108 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper access control in the usememos/memos GitHub repository. Specifically, in versions prior to 0.9.1, users can edit and delete all other users' shortcuts...

8.2CVSS8.3AI score0.00571EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.1 views

PT-2022-28099 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an Authorization Bypass Through User-Controlled Key, which is an Improper Authorization vulnerability. This allows for unauthorized access. The estimated number of...

8.6CVSS8.5AI score0.00702EPSS
Exploits1References11
Cvelist
Cvelist
added 2022/12/28 12:0 a.m.27 views

CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

8.2CVSS5.5AI score0.0059EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/12/28 12:0 a.m.31 views

CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

9.1CVSS5.7AI score0.00568EPSS
Exploits1References2
Rows per page
Query Builder