CVE Browser

changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io: XXE vulnerability in the changedetection.io project

WebSystems WebTOTUM Calendar cross site scripting

changedetection.io has an Authentication Bypass via Decorator Ordering

ChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File Read

Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters

changedetection.io: Zip Slip vulnerability in the backup restore functionality

changedetection.io: XPath - Arbitrary File Read via unparsed-text()

changedetection.io: Reflected XSS in RSS Tag Error Response

changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs

changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

changedetection.io vulnerable to unauthenticated static path traversal

changedetection.io API endpoint is not secured with API token

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows att…

Panic or authentication bypass in github.com/ecnepsnai/web

Multiple cross-site scripting (XSS) vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via (1) th…