Lucene search
K

9 matches found

NVD
NVD
added 2026/05/07 3:16 p.m.9 views

CVE-2026-44263

Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...

4.3CVSS0.00009EPSS
Exploits0References4
Snyk
Snyk
added 2026/05/07 12:3 a.m.5 views

Information Exposure

Overview weblate is an A web-based continuous localization system with tight version control integration Affected versions of this package are vulnerable to Information Exposure in the Screenshot API, tasks API, and component link API. An attacker can access private translation data by enumeratin...

5.3CVSS5.8AI score0.00009EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/05/07 12:3 a.m.4 views

Weblate Vulnerable to Private Translation Enumeration via Screenshot API

Impact The screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. Patches https://github.com/WeblateOrg/weblate/pull/19258 Acknowledgement Weblate thanks Luay for reporting this vulnerability according to the organization's...

4.3CVSS5.8AI score0.00009EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.5 views

PT-2026-38400

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.17.1 Description The screenshots, tasks, and component link API endpoints allow for the enumeration of translations within a project that the user should not be able to access. Recommendations Update to version 5.17...

4.3CVSS5.8AI score0.00009EPSS
Exploits0References13
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.3 views

Mailpit 安全漏洞

Mailpit is an email testing tool developed by Ralph Slooten personally. Versions of Mailpit prior to 1.29.2 contained security vulnerabilities. These vulnerabilities stemmed from the link-checking API’s execution of HTTP HEAD requests for each URL found in emails. During these requests, the targe...

8.6CVSS7.3AI score0.00047EPSS
Exploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:10 p.m.2 views

Malicious code in payouts-link-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2023/06/13 7:15 p.m.0 views

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

5.3CVSS5.8AI score0.00346EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.2 views

PT-2023-3710 · Unknown · Sspanel-Uim

Name of the Vulnerable Software and Affected Versions: SSPanel-Uim version 2023.3 Description: The issue is related to improper authorization in the /link/ interface of the SSPanel-Uim software. This can allow an attacker to gain access to confidential information, potentially leading to a leak o...

5.3CVSS5.3AI score0.00346EPSS
Exploits1References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/03/18 5:8 a.m.1 views

sp mode mail issue where emails in the process of creation may be accessed

Overview sp mode mail provided by NTT DOCOMO contains an application link interface so that mail data can be exchanged with external application during email creation. When the application to be linked is selected, the email contents and attachment are saved to the SD card, therefore other Androi...

4.3CVSS6.7AI score0.00257EPSS
Exploits0References5
Rows per page
Query Builder