Filtered by vendor Usememos
Subscriptions
Total
61 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-41659 | 1 Usememos | 1 Memos | 2025-01-09 | 8.1 High |
| memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true. This may allow an attacking website to make a cross-origin request, allowing the attacker to read private information or make privileged changes to the system as the vulnerable user account. This vulnerability is fixed in 0.21.0. | ||||
| CVE-2024-29029 | 2 Memos, Usememos | 2 Memos, Memos | 2025-01-02 | 6.1 Medium |
| memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file. | ||||
| CVE-2023-5036 | 1 Usememos | 1 Memos | 2024-11-21 | 8.8 High |
| Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1. | ||||
| CVE-2023-4698 | 1 Usememos | 1 Memos | 2024-11-21 | 7.5 High |
| Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2. | ||||
| CVE-2023-4697 | 1 Usememos | 1 Memos | 2024-11-21 | 8.8 High |
| Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2. | ||||
| CVE-2023-4696 | 1 Usememos | 1 Memos | 2024-11-21 | 9.8 Critical |
| Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. | ||||
| CVE-2023-0112 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2023-0111 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2023-0110 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2023-0108 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2023-0107 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2023-0106 | 1 Usememos | 1 Memos | 2024-11-21 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. | ||||
| CVE-2022-4866 | 1 Usememos | 1 Memos | 2024-11-21 | 9.0 Critical |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4865 | 1 Usememos | 1 Memos | 2024-11-21 | 9.0 Critical |
| Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4863 | 1 Usememos | 1 Memos | 2024-11-21 | 6.5 Medium |
| Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4851 | 1 Usememos | 1 Memos | 2024-11-21 | 5.3 Medium |
| Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4850 | 1 Usememos | 1 Memos | 2024-11-21 | 6.5 Medium |
| Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4849 | 1 Usememos | 1 Memos | 2024-11-21 | 6.5 Medium |
| Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4848 | 1 Usememos | 1 Memos | 2024-11-21 | 5.7 Medium |
| Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. | ||||
| CVE-2022-4847 | 1 Usememos | 1 Memos | 2024-11-21 | 6.5 Medium |
| Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. | ||||