Memos
by Usememos
Source repositories
CVEs (78)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-4801 | Med | 0.28 | 5.3 | 0.01 | Dec 28, 2022 | Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4798 | Med | 0.28 | 5.3 | 0.01 | Dec 28, 2022 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4695 | Med | 0.28 | 5.4 | 0.01 | Dec 27, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4694 | Med | 0.28 | 5.4 | 0.01 | Dec 27, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4691 | Med | 0.28 | 5.4 | 0.01 | Dec 27, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4692 | Med | 0.28 | 5.4 | 0.01 | Dec 23, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4690 | Med | 0.28 | 5.4 | 0.01 | Dec 23, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4609 | Med | 0.28 | 5.4 | 0.01 | Dec 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0. | ||
| CVE-2022-4804 | Med | 0.27 | 5.3 | 0.01 | Dec 28, 2022 | Improper Authorization in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2025-65799 | Med | 0.21 | 4.3 | 0.00 | Dec 8, 2025 | A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal. | ||
| CVE-2025-65796 | Med | 0.21 | 4.3 | 0.00 | Dec 8, 2025 | Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos. | ||
| CVE-2022-4845 | Med | 0.21 | 4.3 | 0.00 | Dec 29, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4814 | Med | 0.21 | 4.3 | 0.01 | Dec 28, 2022 | Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4813 | Med | 0.21 | 4.3 | 0.01 | Dec 28, 2022 | Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4810 | Med | 0.21 | 4.3 | 0.00 | Dec 28, 2022 | Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4807 | Med | 0.21 | 4.3 | 0.01 | Dec 28, 2022 | Improper Access Control in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4805 | Med | 0.21 | 4.3 | 0.01 | Dec 28, 2022 | Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1. | ||
| CVE-2022-4797 | Med | 0.21 | 4.3 | 0.01 | Dec 28, 2022 | Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1. |
- risk 0.28cvss 5.3epss 0.01
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.28cvss 5.3epss 0.01
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.28cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- risk 0.27cvss 5.3epss 0.01
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.00
A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.
- risk 0.21cvss 4.3epss 0.00
Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.
- risk 0.21cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.01
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.01
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.00
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.01
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.01
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
- risk 0.21cvss 4.3epss 0.01
Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.
Page 4 of 4