CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information |
| 03/01/2022 |
| CVE-2021-4168 | HIGH8.8 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 26/12/2021 |
| CVE-2021-4000 | MEDIUM6.1 | showdoc is vulnerable to URL Redirection to Untrusted Site | 03/12/2021 |
| CVE-2021-4017 | HIGH8.8 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3993 | MEDIUM6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3990 | MEDIUM6.5 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 01/12/2021 |
| CVE-2021-3989 | MEDIUM6.1 | showdoc is vulnerable to URL Redirection to Untrusted Site | 01/12/2021 |
| CVE-2021-3776 | MEDIUM5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3775 | MEDIUM5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3683 | MEDIUM6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-41745 | CRITICAL9.8 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. | 22/10/2021 |
| CVE-2021-36440 | CRITICAL9.8 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'. | 08/09/2021 |
| CVE-2021-3678 | MEDIUM5.9 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 04/08/2021 |
| CVE-2021-3680 | MEDIUM4.9 | showdoc is vulnerable to Missing Cryptographic Step | 04/08/2021 |
| CVE-2018-19621 | MEDIUM6.5 | server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. | 28/11/2018 |
| CVE-2018-19620 | MEDIUM4.3 | ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. | 28/11/2018 |