Vulnerabilities in dgtlmoon
30 resultsCVE-2026-95270MEDIUMdgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancyEPSS 0.4%CVE-2026-95657MEDIUMdgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scriptingEPSS 0.4%CVE-2026-43891HIGHchangedetection.io: Arbitrary Local File Read via crafted backup restoreEPSS 0.4%CVE-2026-71204MEDIUMchangedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key EnforcementEPSS 0.3%CVE-2026-29038MEDIUMchangedetection.io: Reflected XSS in RSS Tag Error ResponseEPSS 0.3%CVE-2026-71203MEDIUMchangedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI SchemaEPSS 0.3%CVE-2026-92814LOWchangedetection.io through 0.60.6 Cross-Site Scripting via watch_titleEPSS 0.3%CVE-2026-35000HIGHChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File ReadEPSS 0.3%CVE-2026-71205MEDIUMchangedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-ForceEPSS 0.3%CVE-2026-41895HIGHchangedetection.io: XXE vulnerability in the changedetection.io projectEPSS 0.3%