Vulnerabilidades en dgtlmoon
30 resultadosCVE-2024-32651CRITICALServer Side Template Injection in Jinja2 allows Remote Command ExecutionEPSS 85.3%CVE-2024-51483MEDIUMchangedetection.io Path Traversal vulnerabilityEPSS 2.3%CVE-2024-34061MEDIUMReflected cross site scripting in changedetection.ioEPSS 1.3%CVE-2026-25527MEDIUMchangedetection.io vulnerable to unauthenticated static path traversalEPSS 1.0%CVE-2024-56509HIGHchangedetection.io has Improper Input Validation Leading to LFR/Path TraversalEPSS 0.7%CVE-2024-51998HIGHPath traversal using file URI scheme without supplying hostname in changedetection.ioEPSS 0.7%CVE-2026-95272MEDIUMdgtlmoon changedetection.io Screenshot flask_app.py static_content path traversalEPSS 0.7%CVE-2026-95271MEDIUMdgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authenticationEPSS 0.7%CVE-2025-52558HIGHChangeDetection.io XSS in watch overviewEPSS 0.6%CVE-2024-23329LOWchangedetection.io API endpoint is not secured with API tokenEPSS 0.6%CVE-2026-29065HIGHchangedetection.io: Zip Slip vulnerability in the backup restore functionalityEPSS 0.6%CVE-2026-35490CRITICALchangedetection.io has an Authentication Bypass via Decorator OrderingEPSS 0.5%CVE-2026-92815HIGHchangedetection.io through 0.60.6 SSRF via browser-step Goto URLEPSS 0.5%CVE-2026-29039HIGHchangedetection.io: XPath - Arbitrary File Read via unparsed-text()EPSS 0.5%CVE-2026-95273MEDIUMdgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversalEPSS 0.5%CVE-2026-95656MEDIUMdgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgeryEPSS 0.5%CVE-2026-27645MEDIUMchangedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error ResponseEPSS 0.5%CVE-2026-27696HIGHchangedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLsEPSS 0.5%CVE-2026-33981HIGHChangedetection.io Discloses Environment Variables via jq env Builtin in Include FiltersEPSS 0.5%CVE-2025-62780LOWchangedetection.io vulnerable to stored XSS in Watch update via APIEPSS 0.5%