CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/12/2021 |
| CVE-2021-3993 | MÉDIO6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3990 | MÉDIO6.5 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 01/12/2021 |
| CVE-2021-3989 | MÉDIO6.1 | showdoc is vulnerable to URL Redirection to Untrusted Site | 01/12/2021 |
| CVE-2021-3776 | MÉDIO5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3775 | MÉDIO5.4 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3683 | MÉDIO6.5 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-41745 | CRÍTICO9.8 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. | 22/10/2021 |
| CVE-2021-36440 | CRÍTICO9.8 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'. | 08/09/2021 |
| CVE-2021-3678 | MÉDIO5.9 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 04/08/2021 |
| CVE-2021-3680 | MÉDIO4.9 | showdoc is vulnerable to Missing Cryptographic Step | 04/08/2021 |
| CVE-2018-19621 | MÉDIO6.5 | server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. | 28/11/2018 |
| CVE-2018-19620 | MÉDIO4.3 | ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. | 28/11/2018 |
| CVE-2018-19609 | MÉDIO6.5 | ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL. | 27/11/2018 |
| CVE-2018-19433 | MÉDIO6.1 | ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value. | 22/11/2018 |
| CVE-2018-16342 | MÉDIO5.4 | ShowDoc v1.8.0 has XSS via a new page. | 02/09/2018 |