Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 46

Export CSV
CVE-2022-0940

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0938

Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0937

Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0880

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0409

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0362

SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2022-0079

Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

CVSS 3.1 · 5.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4172

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4168

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4017

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-4000

Open Redirect in star7th/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-41745

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3993

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3990

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3989

Open Redirect in star7th/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3776

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3775

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3683

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3680

Missing Cryptographic Step in star7th/showdoc

showdoc is vulnerable to Missing Cryptographic Step

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc
CVE-2021-3678

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Showdoc
Products
Showdoc