2312 matches found
PT-2025-46916
Name of the Vulnerable Software and Affected Versions grist-core versions prior to 1.7.7 Description grist-core is a spreadsheet hosting server. A user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged...
GHSA-4C3J-3H7V-22Q9 changedetection.io: Stored XSS in Watch update via API
Summary A Stored Cross Site Scripting is present in the changedetection.io Watch update API due to unsufficient security checks. Details Tested on changedetection.io version v0.50.24 console REPOSITORY TAG IMAGE ID CREATED SIZE ghcr.io/dgtlmoon/changedetection.io latest 0367276509a0 23 hours ago...
CVE-2025-13057
creationtimestamp| type| source ---|---|--- 2025-11-12 20:38:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5hj25xv7z2u...
CVE-2025-40170
creationtimestamp| type| source ---|---|--- 2025-11-12 12:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gnkjtj452s 2025-11-12 14:01:22+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gsruq7no52 2025-12-03 14:14:49+00:00| seen|...
CVE-2024-32014
creationtimestamp| type| source ---|---|--- 2025-11-12 00:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5feac24fa2s 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-12...
CVE-2025-11521
The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attacke...
CVE-2021-4462
creationtimestamp| type| source ---|---|--- 2025-11-11 01:30:37+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cyfupb7gf2 2025-11-11 01:52:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5czngvb7z2k 2025-11-11 03:30:37+00:00| seen|...
CVE-2025-48065
creationtimestamp| type| source ---|---|--- 2025-11-10 21:54:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5cmd4fe4l2k 2025-11-10 22:22:39+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cntcskwo52 2025-11-10 23:25:46+00:00| seen|...
CVE-2025-64688
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers...
CVE-2025-12520 WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scripting
The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL validation that allows users to pull in a malicious HTML file. This makes it possible for authenticated attackers, wit...
CVE-2025-12789
A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that occurs during the logout process. The redirecturi parameter associated with the openid-connect logout protocol does not properly validate the provided URL. Mitigation Mitigation for this issue is either...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2025-21079
Samsung Members before version 5.5.01.3 has an input validation flaw that allows a remote attacker to connect to an arbitrary URL and launch arbitrary Samsung Members–privileged activities. User interaction is required to trigger the issue. Public sources in multiple feeds corroborate this CVE (C...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2025-12456
creationtimestamp| type| source ---|---|--- 2025-11-04 05:41:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4rt66z2ij2x...
CVE-2025-12611
creationtimestamp| type| source ---|---|--- 2025-11-03 03:01:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4ozrmzzq326 2025-11-03 05:45:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4pcwdyjzl2a 2025-11-03 06:25:10+00:00| seen|...
CVE-2025-60319
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint AttachController.java...
VulnCheck KEV: CVE-2024-45216
Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip...
EUVD-2025-37199
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...