usememos usememos/memos
58 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-0109 | unspecified – < 0.10.0 | Stored XSS in usememos/memos | CRITICAL 9.8 | 0.5 % | ||
| CVE-2023-5036 | unspecified – < 0.15.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | HIGH 8.8 | 0.3 % | ||
| CVE-2023-4698 | unspecified – < 0.13.2 | Improper Input Validation in usememos/memos | HIGH 7.5 | 0.9 % | ||
| CVE-2023-4697 | unspecified – < 0.13.2 | Improper Privilege Management in usememos/memos | HIGH 8.8 | 0.8 % | ||
| CVE-2023-4696 | unspecified – < 0.13.2 | Improper Access Control in usememos/memos | CRITICAL 9.8 | 1.1 % | ||
| CVE-2023-0112 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.6 | 0.6 % | ||
| CVE-2023-0111 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-0110 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.1 | 0.5 % | ||
| CVE-2023-0108 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.1 | 0.5 % | ||
| CVE-2023-0107 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-0106 | unspecified – < 0.10.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | CRITICAL 9.0 | 0.7 % | ||
| CVE-2022-4866 | unspecified – < 0.9.1 | Cross-site Scripting (XSS) - Stored in usememos/memos | CRITICAL 9.8 | 1.1 % | ||
| CVE-2022-4865 | unspecified – < 0.9.1 | Cross-site Scripting (XSS) - Stored in usememos/memos | CRITICAL 9.0 | 1.1 % | ||
| CVE-2022-4863 | unspecified – < 0.9.1 | Improper Handling of Insufficient Permissions or Privileges in usememos/memos | HIGH 8.4 | 0.7 % | ||
| CVE-2022-4851 | unspecified – < 0.9.1 | Improper Handling of Values in usememos/memos | CRITICAL 9.8 | 0.8 % | ||
| CVE-2022-4850 | unspecified – < 0.9.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-4849 | unspecified – < 0.9.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | HIGH 8.3 | 0.4 % | ||
| CVE-2022-4848 | unspecified – < 0.9.1 | Improper Verification of Source of a Communication Channel in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4847 | unspecified – < 0.9.1 | Incorrectly Specified Destination in a Communication Channel in usememos/memos | HIGH 8.3 | 0.7 % | ||
| CVE-2022-4846 | unspecified – < 0.9.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | MEDIUM 6.5 | 0.3 % | ||
| CVE-2022-4845 | unspecified – < 0.9.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | MEDIUM 6.7 | 0.3 % | ||
| CVE-2022-4844 | unspecified – < 0.9.1 | Cross-Site Request Forgery (CSRF) in usememos/memos | HIGH 8.8 | 0.3 % | ||
| CVE-2022-4841 | unspecified – < 0.9.1 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4840 | unspecified – < 0.9.1 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.6 | 0.7 % | ||
| CVE-2022-4839 | unspecified – < 0.9.1 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 8.0 | 0.8 % | ||
| CVE-2022-4814 | unspecified – < 0.9.1 | Improper Access Control in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4813 | unspecified – < 0.9.1 | Insufficient Granularity of Access Control in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4812 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4811 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.3 | 0.6 % | ||
| CVE-2022-4810 | unspecified – < 0.9.1 | Improper Access Control in usememos/memos | MEDIUM 6.3 | 0.5 % | ||
| CVE-2022-4809 | unspecified – < 0.9.1 | Improper Access Control in usememos/memos | HIGH 8.8 | 1.0 % | ||
| CVE-2022-4808 | unspecified – < 0.9.1 | Improper Privilege Management in usememos/memos | HIGH 8.8 | 0.4 % | ||
| CVE-2022-4807 | unspecified – < 0.9.1 | Improper Access Control in usememos/memos | HIGH 8.2 | 0.6 % | ||
| CVE-2022-4806 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.2 | 0.8 % | ||
| CVE-2022-4805 | unspecified – < 0.9.1 | Incorrect Use of Privileged APIs in usememos/memos | HIGH 7.3 | 0.5 % | ||
| CVE-2022-4804 | unspecified – < 0.9.1 | Improper Authorization in usememos/memos | HIGH 8.2 | 0.6 % | ||
| CVE-2022-4803 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.8 | 0.9 % | ||
| CVE-2022-4802 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | CRITICAL 9.1 | 0.6 % | ||
| CVE-2022-4801 | unspecified – < 0.9.1 | Insufficient Granularity of Access Control in usememos/memos | HIGH 8.2 | 0.7 % | ||
| CVE-2022-4800 | unspecified – < 0.9.1 | Improper Verification of Source of a Communication Channel in usememos/memos | HIGH 8.6 | 0.6 % | ||
| CVE-2022-4799 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.6 | 0.8 % | ||
| CVE-2022-4798 | unspecified – < 0.9.1 | Authorization Bypass Through User-Controlled Key in usememos/memos | HIGH 8.6 | 0.8 % | ||
| CVE-2022-4797 | unspecified – < 0.9.1 | Improper Restriction of Excessive Authentication Attempts in usememos/memos | CRITICAL 9.8 | 0.8 % | ||
| CVE-2022-4796 | unspecified – < 0.9.1 | Incorrect Use of Privileged APIs in usememos/memos | HIGH 8.1 | 0.8 % | ||
| CVE-2022-4767 | unspecified – < 0.9.1 | Denial of Service in usememos/memos | HIGH 7.6 | 0.7 % | ||
| CVE-2022-4734 | unspecified – < 0.9.1 | Improper Removal of Sensitive Information Before Storage or Transfer in usememos/memos | HIGH 8.1 | 0.8 % | ||
| CVE-2022-4695 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.6 | 0.7 % | ||
| CVE-2022-4694 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | MEDIUM 5.7 | 0.6 % | ||
| CVE-2022-4692 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.1 | 0.6 % | ||
| CVE-2022-4691 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 8.3 | 0.7 % | ||
| CVE-2022-4690 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.1 | 0.6 % | ||
| CVE-2022-4689 | unspecified – < 0.9.0 | Improper Access Control in usememos/memos | HIGH 8.8 | 0.8 % | ||
| CVE-2022-4688 | unspecified – < 0.9.0 | Improper Authorization in usememos/memos | HIGH 8.8 | 0.8 % | ||
| CVE-2022-4687 | unspecified – < 0.9.0 | Incorrect Use of Privileged APIs in usememos/memos | HIGH 8.1 | 0.7 % | ||
| CVE-2022-4686 | unspecified – < 0.9.0 | Authorization Bypass Through User-Controlled Key in usememos/memos | CRITICAL 9.8 | 0.8 % | ||
| CVE-2022-4684 | unspecified – < 0.9.0 | Improper Access Control in usememos/memos | HIGH 8.8 | 0.6 % | ||
| CVE-2022-4683 | unspecified – < 0.9.0 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-4609 | unspecified – < 0.9.0 | Cross-site Scripting (XSS) - Stored in usememos/memos | HIGH 7.6 | 0.8 % |