usememos kayıtları
usememos üreticisine ait 73 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %93,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')21
- CWE-284 Improper Access Control11
- CWE-639 Authorization Bypass Through User-Controlled Key8
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-648 Incorrect Use of Privileged APIs3
- CWE-918 Server-Side Request Forgery (SSRF)3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
73 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2025-22952Kavram kanıtı | elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can beusememos · memos · CWE-918 | Kritik9,8 | — | %2,9 | 27 Şub 2025 |
40Planlayın | CVE-2025-50738Kavram kanıtı | The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs.usememos · memos · CWE-200 | Kritik9,8 | — | %2,2 | 29 Tem 2025 |
39İzleyin | CVE-2023-4696Kavram kanıtı | Improper Access Control in usememos/memosusememos · memos · CWE-284 | Kritik9,8 | — | %1,1 | 31 Ağu 2023 |
39İzleyin | CVE-2022-4686İstismar yok | Authorization Bypass Through User-Controlled Key in usememos/memosusememos · memos · CWE-639 | Kritik9,8 | — | %0,7 | 23 Ara 2022 |
36İzleyin | CVE-2022-4865İstismar yok | Cross-site Scripting (XSS) - Stored in usememos/memosusememos · memos · CWE-79 | Kritik9,0 | — | %1,0 | 31 Ara 2022 |
36İzleyin | CVE-2022-4866İstismar yok | Cross-site Scripting (XSS) - Stored in usememos/memosusememos · memos · CWE-79 | Kritik9,0 | — | %1,0 | 31 Ara 2022 |
35İzleyin | CVE-2022-4809İstismar yok | Improper Access Control in usememos/memosusememos · memos · CWE-284 | Yüksek8,8 | — | %0,9 | 28 Ara 2022 |
35İzleyin | CVE-2023-4697İstismar yok | Improper Privilege Management in usememos/memosusememos · memos · CWE-269 | Yüksek8,8 | — | %0,8 | 31 Ağu 2023 |
35İzleyin | CVE-2022-4803İstismar yok | Authorization Bypass Through User-Controlled Key in usememos/memosusememos · memos · CWE-639 | Yüksek8,8 | — | %0,8 | 28 Ara 2022 |
35İzleyin | CVE-2022-4688İstismar yok | Improper Authorization in usememos/memosusememos · memos · CWE-285 | Yüksek8,8 | — | %0,7 | 23 Ara 2022 |
35İzleyin | CVE-2022-4689İstismar yok | Improper Access Control in usememos/memosusememos · memos · CWE-284 | Yüksek8,8 | — | %0,7 | 23 Ara 2022 |
35İzleyin | CVE-2022-4684İstismar yok | Improper Access Control in usememos/memosusememos · memos · CWE-284 | Yüksek8,8 | — | %0,6 | 23 Ara 2022 |
35İzleyin | CVE-2022-4808İstismar yok | Improper Privilege Management in usememos/memosusememos · memos · CWE-269 | Yüksek8,8 | — | %0,4 | 28 Ara 2022 |
35İzleyin | CVE-2023-5036İstismar yok | Cross-Site Request Forgery (CSRF) in usememos/memosusememos · memos · CWE-352 | Yüksek8,8 | — | %0,3 | 18 Eyl 2023 |
35İzleyin | CVE-2022-4844İstismar yok | Cross-Site Request Forgery (CSRF) in usememos/memosusememos · memos · CWE-352 | Yüksek8,8 | — | %0,3 | 29 Ara 2022 |
32İzleyin | CVE-2022-4796İstismar yok | Incorrect Use of Privileged APIs in usememos/memosusememos · memos · CWE-648 | Yüksek8,1 | — | %0,8 | 28 Ara 2022 |
32İzleyin | CVE-2024-41659İstismar yok | GHSL-2024-034: memos CORS Misconfiguration in server.gousememos · memos · CWE-942 | Yüksek8,1 | — | %0,6 | 20 Ağu 2024 |
32İzleyin | CVE-2022-4687İstismar yok | Incorrect Use of Privileged APIs in usememos/memosusememos · memos · CWE-648 | Yüksek8,1 | — | %0,6 | 23 Ara 2022 |
30İzleyin | CVE-2023-4698Kavram kanıtı | Improper Input Validation in usememos/memosusememos · memos · CWE-20 | Yüksek7,5 | — | %0,9 | 31 Ağu 2023 |
30İzleyin | CVE-2022-4767İstismar yok | Denial of Service in usememos/memosusememos · memos · CWE-400 | Yüksek7,5 | — | %0,7 | 27 Ara 2022 |
30İzleyin | CVE-2025-65795İstismar yok | Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts vusememos · memos · CWE-284 | Yüksek7,5 | — | %0,3 | 8 Ara 2025 |
28İzleyin | CVE-2024-21635İstismar yok | Memos Access Tokens Stay Valid after User Password Changeusememos · memos · CWE-287 | Yüksek7,1 | — | %0,3 | 14 Kas 2025 |
26İzleyin | CVE-2022-4799İstismar yok | Authorization Bypass Through User-Controlled Key in usememos/memosusememos · memos · CWE-639 | Orta6,5 | — | %0,8 | 28 Ara 2022 |
26İzleyin | CVE-2022-4863İstismar yok | Improper Handling of Insufficient Permissions or Privileges in usememos/memosusememos · memos · CWE-280 | Orta6,5 | — | %0,7 | 30 Ara 2022 |
26İzleyin | CVE-2022-4847İstismar yok | Incorrectly Specified Destination in a Communication Channel in usememos/memosusememos · memos · CWE-941 | Orta6,5 | — | %0,6 | 29 Ara 2022 |
- CVE-2025-2295240Planlayın
elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be
KritikCVSS 9,8Kavram kanıtıEPSS %3usememos · memos27 Şub 2025
- CVE-2025-5073840Planlayın
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs.
KritikCVSS 9,8Kavram kanıtıEPSS %2usememos · memos29 Tem 2025
- CVE-2023-469639İzleyin
Improper Access Control in usememos/memos
KritikCVSS 9,8Kavram kanıtıEPSS %1usememos · memos31 Ağu 2023
- CVE-2022-468639İzleyin
Authorization Bypass Through User-Controlled Key in usememos/memos
KritikCVSS 9,8İstismar yokEPSS %1usememos · memos23 Ara 2022
- CVE-2022-486536İzleyin
Cross-site Scripting (XSS) - Stored in usememos/memos
KritikCVSS 9,0İstismar yokEPSS %1usememos · memos31 Ara 2022
- CVE-2022-486636İzleyin
Cross-site Scripting (XSS) - Stored in usememos/memos
KritikCVSS 9,0İstismar yokEPSS %1usememos · memos31 Ara 2022
- CVE-2022-480935İzleyin
Improper Access Control in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos28 Ara 2022
- CVE-2023-469735İzleyin
Improper Privilege Management in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos31 Ağu 2023
- CVE-2022-480335İzleyin
Authorization Bypass Through User-Controlled Key in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos28 Ara 2022
- CVE-2022-468835İzleyin
Improper Authorization in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos23 Ara 2022
- CVE-2022-468935İzleyin
Improper Access Control in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos23 Ara 2022
- CVE-2022-468435İzleyin
Improper Access Control in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %1usememos · memos23 Ara 2022
- CVE-2022-480835İzleyin
Improper Privilege Management in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %0usememos · memos28 Ara 2022
- CVE-2023-503635İzleyin
Cross-Site Request Forgery (CSRF) in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %0usememos · memos18 Eyl 2023
- CVE-2022-484435İzleyin
Cross-Site Request Forgery (CSRF) in usememos/memos
YüksekCVSS 8,8İstismar yokEPSS %0usememos · memos29 Ara 2022
- CVE-2022-479632İzleyin
Incorrect Use of Privileged APIs in usememos/memos
YüksekCVSS 8,1İstismar yokEPSS %1usememos · memos28 Ara 2022
- CVE-2024-4165932İzleyin
GHSL-2024-034: memos CORS Misconfiguration in server.go
YüksekCVSS 8,1İstismar yokEPSS %1usememos · memos20 Ağu 2024
- CVE-2022-468732İzleyin
Incorrect Use of Privileged APIs in usememos/memos
YüksekCVSS 8,1İstismar yokEPSS %1usememos · memos23 Ara 2022
- CVE-2023-469830İzleyin
Improper Input Validation in usememos/memos
YüksekCVSS 7,5Kavram kanıtıEPSS %1usememos · memos31 Ağu 2023
- CVE-2022-476730İzleyin
Denial of Service in usememos/memos
YüksekCVSS 7,5İstismar yokEPSS %1usememos · memos27 Ara 2022
- CVE-2025-6579530İzleyin
Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts v
YüksekCVSS 7,5İstismar yokEPSS %0usememos · memos8 Ara 2025
- CVE-2024-2163528İzleyin
Memos Access Tokens Stay Valid after User Password Change
YüksekCVSS 7,1İstismar yokEPSS %0usememos · memos14 Kas 2025
- CVE-2022-479926İzleyin
Authorization Bypass Through User-Controlled Key in usememos/memos
OrtaCVSS 6,5İstismar yokEPSS %1usememos · memos28 Ara 2022
- CVE-2022-486326İzleyin
Improper Handling of Insufficient Permissions or Privileges in usememos/memos
OrtaCVSS 6,5İstismar yokEPSS %1usememos · memos30 Ara 2022
- CVE-2022-484726İzleyin
Incorrectly Specified Destination in a Communication Channel in usememos/memos
OrtaCVSS 6,5İstismar yokEPSS %1usememos · memos29 Ara 2022