Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

WESEEK, Inc.

4 Products 36 CVEs

CVE Severity Distribution (All Time)

Critical
0
High
0
Medium
0
Low
0

Timeline Overview

Last 30 Days 0 CVEs
Last 6 Months 0 CVEs
Last Year 0 CVEs

Products

View all

GROWI

15 Versions 32 CVEs

GROWI v4.2 Series

2 Versions 3 CVEs

v4 series

1 Version 1 CVE

GROWI v5 series

1 Version 1 CVE

Recent CVEs

View all
CVE-2023-42436 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability exists in the presentation feature of GROWI versions prior to v3.4.0. If this vulnerability is exploited, a…

CVE-2023-50332 UNKNOWN 1 year, 8 months ago

Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is ex…

CVE-2023-50294 UNKNOWN 1 year, 8 months ago

The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret access k…

CVE-2023-50175 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customi…

CVE-2023-49807 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, a…

CVE-2023-49779 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrar…

CVE-2023-49598 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is ex…

CVE-2023-49119 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary…

CVE-2023-47215 UNKNOWN 1 year, 8 months ago

Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerab…

CVE-2023-46699 UNKNOWN 1 year, 8 months ago

Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0. If a user views a malicious…