CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information |
| 03/01/2022 |
| CVE-2021-4168 | 높음8.8 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 26/12/2021 |
| CVE-2021-4000 | 보통6.1 | showdoc is vulnerable to URL Redirection to Untrusted Site | 03/12/2021 |
| CVE-2021-4017 | 높음8.8 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3993 | 보통6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3990 | 보통6.5 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 01/12/2021 |
| CVE-2021-3989 | 보통6.1 | showdoc is vulnerable to URL Redirection to Untrusted Site | 01/12/2021 |
| CVE-2021-3776 | 보통5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3775 | 보통5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3683 | 보통6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-41745 | 심각9.8 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. | 22/10/2021 |
| CVE-2021-36440 | 심각9.8 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'. | 08/09/2021 |
| CVE-2021-3678 | 보통5.9 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 04/08/2021 |
| CVE-2021-3680 | 보통4.9 | showdoc is vulnerable to Missing Cryptographic Step | 04/08/2021 |
| CVE-2018-19621 | 보통6.5 | server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. | 28/11/2018 |
| CVE-2018-19620 | 보통4.3 | ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. | 28/11/2018 |