Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Showdoc HIGH 7.2
CVE-2022-1034

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,950 2022-03-22
Showdoc MEDIUM 5.4
CVE-2022-0966

Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.

Fix: 2.4.10+
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0967

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0964

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0965

Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0942

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0957

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0956

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 6.1
CVE-2022-0951

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0950

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0945

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-15
Showdoc MEDIUM 5.4
CVE-2022-0962

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0960

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: 2.10.4+
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0946

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0941

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0940

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0938

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0937

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

Fix: after 2.10.3
Fix from $1,600 2022-03-14
Showdoc MEDIUM 5.4
CVE-2022-0880

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

Fix: 2.10.2+
Fix from $1,600 2022-03-12
Showdoc HIGH 7.8
CVE-2022-0409

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.

Fix: 2.10.2+
Fix from $1,950 2022-02-19
Showdoc CRITICAL 9.8
CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

Fix: 2.10.3+
Fix from $2,300 2022-01-26
Showdoc MEDIUM 5.4
CVE-2021-4172

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

Fix: 2.10.2+
Fix from $1,600 2022-01-22
Showdoc MEDIUM 5.3
CVE-2022-0079

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

Fix: 2.10.0+
Fix from $1,600 2022-01-03
Showdoc HIGH 8.8
CVE-2021-4168

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: 2.9.15+
Fix from $1,950 2021-12-26
Showdoc MEDIUM 6.1
CVE-2021-4000

showdoc is vulnerable to URL Redirection to Untrusted Site

Patch available
Fix from $1,600 2021-12-03
Showdoc HIGH 8.8
CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: 2.9.13+
Fix from $1,950 2021-12-01
Showdoc MEDIUM 6.5
CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: 2.9.13+
Fix from $1,600 2021-12-01
Showdoc MEDIUM 6.5
CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Fix: 2.9.13+
Fix from $1,600 2021-12-01
Showdoc MEDIUM 6.1
CVE-2021-3989

showdoc is vulnerable to URL Redirection to Untrusted Site

Fix: 2.9.13+
Fix from $1,600 2021-12-01
Showdoc MEDIUM 6.5
CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

Fix: after 2.9.12
Fix from $1,600 2021-11-13