Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Erudika Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1848 1 Erudika 1 Para 2022-06-03 4.3 MEDIUM 5.3 MEDIUM
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.
CVE-2022-1782 1 Erudika 1 Para 2022-05-25 4.3 MEDIUM 6.1 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.
CVE-2022-1543 1 Erudika 1 Scoold 2022-05-11 6.5 MEDIUM 8.8 HIGH
Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server.
CVE-2021-46372 1 Erudika 1 Scoold 2022-02-25 3.5 LOW 5.4 MEDIUM
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase letters.