61995 matches found
CVE-2026-95659
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
CVE-2026-95271
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function checkauthentication of the file changedetectionio/flaskapp.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from...
CVE-2026-95659 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
CVE-2026-95659 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
EUVD-2026-84372
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
CVE-2026-95659
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
CVE-2026-95659
MISP versions prior to 2.5.47 are affected by a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepts a parent object type parameter from the URL without validation and passes it to the Overmind-themed AnalystData thread view ele...
CVE-2026-95659 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread
MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...
CVE-2026-95270
A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...
CVE-2026-95271
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function checkauthentication of the file changedetectionio/flaskapp.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from...
EUVD-2026-84363
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function checkauthentication of the file changedetectionio/flaskapp.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from...
CVE-2026-95271 dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function checkauthentication of the file changedetectionio/flaskapp.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from...
CVE-2026-95271
dgtlmoon changedetection.io (up to 0.60.7 ) is affected by an improper authentication vulnerability in the check_authentication function of the Authentication Hook component (changedetectionio/flask_app.py). The flaw allows a remote, unauthenticated attacker to bypass authentication controls. The...
CVE-2026-95271 dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function checkauthentication of the file changedetectionio/flaskapp.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from...
RUSTSEC-2026-0301 Double free in `StackVec::retain` when a predicate or element `Drop` panics
Summary StackVec::retain committed its new length to self.len only after its internal loop completed. If the retain predicate or a removed element's Drop implementation panicked before the loop finished, unwinding proceeded with self.len still equal to the original, pre-retain length, leaving...
Double free in `StackVec::retain` when a predicate or element `Drop` panics
Summary StackVec::retain committed its new length to self.len only after its internal loop completed. If the retain predicate or a removed element's Drop implementation panicked before the loop finished, unwinding proceeded with self.len still equal to the original, pre-retain length, leaving...
CVE-2026-95270 dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy
A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...
CVE-2026-95270
dgtlmoon changedetection.io versions up to 0.60.7 are affected by a timing discrepancy in the check_password function within changedetectionio/flask_app.py (component Hash Comparison , CWE-208 ). An attacker can remotely exploit the observable timing difference when manipulating the Password argu...
CVE-2026-95270
A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...
EUVD-2026-84359
A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the function checkpassword of the file changedetectionio/flaskapp.py of the component Hash Comparison. This manipulation of the argument Password causes observable timing discrepancy. The attack is possible...