Cross-site Scripting (XSS) – Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0107
Cross-site Scripting (XSS) – Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0106
Cross-site Scripting (XSS) – Stored in GitHub repository usememos/memos prior to 0.10.0.
CVE-2023-0105
A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.
CVE-2023-0103
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.
CVE-2023-0102
LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files.