Vulnerabilidades em vulnerability-lookup

5 resultados

Análise Vexday

O fornecedor vulnerability-lookup apresenta apenas uma vulnerabilidade registrada, sem exploração ativa conhecida, mas recentemente divulgada (últimos 90 dias). A fraqueza identificada (CWE-918 - Server-Side Request Forgery) é de natureza moderada, sugerindo risco controlado, embora demande monitoramento contínuo da atividade de exploração.

CVE-2026-73374MEDIUMStored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookupEPSS 0.6%CVE-2026-73405MEDIUMAuthorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookupEPSS 0.5%CVE-2026-72761MEDIUMWebhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookupEPSS 0.5%CVE-2026-73432MEDIUMStored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookupEPSS 0.4%CVE-2026-73431HIGHReusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookupEPSS 0.4%