Threat database

305 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-42649Favicon Rotator · Cross-site Scripting High7.1EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42649 Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. EPSS 0.3%Vulnerability Archetyped #cwe-79	CVE Database V5	2026-06-15
High	8.7	EPSS 0.6%	CVE-2026-3329Nexus Repository Manager · Improper Restriction of Excessive Authentication Attempts High8.7EPSS 0.6%2026-06-11CVE Database V5CVE-2026-3329 A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints. EPSS 0.6%Vulnerability Sonatype #cwe-307	CVE Database V5	2026-06-11
Medium	5.1	EPSS 0.4%	CVE-2026-7308Nexus Repository · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.1EPSS 0.4%2026-05-11CVE Database V5CVE-2026-7308 An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus Repository versions 3.6.0 through versions before 3.92.0. This could allow the attacker to perform actions in the context of the victim's session. EPSS 0.4%Vulnerability Sonatype #cwe-79	CVE Database V5	2026-05-11
Medium	5.1	EPSS 0.3%	CVE-2026-3048Nexus Repository · Deserialization of Untrusted Data Medium5.1EPSS 0.3%2026-05-11CVE Database V5CVE-2026-3048 An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server. EPSS 0.3%Vulnerability Sonatype #cwe-502 #cwe-918	CVE Database V5	2026-05-11
Critical	9.2	EPSS 0.6%	CVE-2026-5189Nexus Repository · Use of Hard-coded Credentials Critical9.2EPSS 0.6%2026-04-15CVE Database V5CVE-2026-5189 CVE-2026-5189 is a critical vulnerability in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 involving the use of hard-coded credentials. An unauthenticated attacker with network access can exploit this issue if the non-default configuration nexus.orient.binaryListenerEnabled=true is enabled. Successful exploitation allows unauthorized read/write access to the internal database and execution of arbitrary OS commands as the Nexus process user. The vulnerability has a CVSS 4. EPSS 0.6%Vulnerability Sonatype #cwe-798	CVE Database V5	2026-04-15
Critical	9.4	EPSS 0.8%	CVE-2026-3199Nexus Repository · Deserialization of Untrusted Data Critical9.4EPSS 0.8%2026-04-08CVE Database V5CVE-2026-3199 CVE-2026-3199 is a critical vulnerability in Sonatype Nexus Repository versions 3.22.1 through 3.90.2. It affects the task management component, allowing an authenticated attacker with task creation permissions to execute arbitrary code by bypassing the nexus.scripts.allowCreation security control. The vulnerability is related to deserialization of untrusted data (CWE-502). The CVSS 4. EPSS 0.8%Vulnerability Sonatype #cwe-502	CVE Database V5	2026-04-08
Medium	5.1	EPSS 0.6%	CVE-2026-3438Nexus Repository · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.1EPSS 0.6%2026-04-08CVE Database V5CVE-2026-3438 CVE-2026-3438 is a reflected cross-site scripting (XSS) vulnerability in Sonatype Nexus Repository versions 3.0.0 through 3.90.2. It allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser via a specially crafted URL. Exploitation requires user interaction. The vulnerability has a medium severity with a CVSS score of 5.1. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.6%Vulnerability Sonatype #cwe-79	CVE Database V5	2026-04-08
Not rated	–		osint · ThreatFox IOCs for 2026-04-08 2026-04-08ThreatFox MISP Feed ThreatFox IOCs for 2026-04-08 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-08
Not rated	–		osint · ThreatFox IOCs for 2026-04-07 2026-04-07ThreatFox MISP Feed ThreatFox IOCs for 2026-04-07 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-07
Not rated	–		osint · ThreatFox IOCs for 2026-04-06 2026-04-06ThreatFox MISP Feed ThreatFox IOCs for 2026-04-06 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-06
Not rated	–		osint · ThreatFox IOCs for 2026-04-05 2026-04-05ThreatFox MISP Feed ThreatFox IOCs for 2026-04-05 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-05
Not rated	–		osint · ThreatFox IOCs for 2026-04-04 2026-04-04ThreatFox MISP Feed ThreatFox IOCs for 2026-04-04 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-04
Not rated	–		osint · ThreatFox IOCs for 2026-04-03 2026-04-03ThreatFox MISP Feed ThreatFox IOCs for 2026-04-03 Indicator type #type:osint #tlp:white	ThreatFox MISP Feed	2026-04-03
Not rated	–		osint · ThreatFox IOCs for 2026-04-02 2026-04-02ThreatFox MISP Feed ThreatFox IOCs for 2026-04-02 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-04-02
Not rated	–		osint · ThreatFox IOCs for 2026-04-01 2026-04-01ThreatFox MISP Feed ThreatFox IOCs for 2026-04-01 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-04-01
Not rated	–		osint · ThreatFox IOCs for 2026-03-31 2026-03-31ThreatFox MISP Feed ThreatFox IOCs for 2026-03-31 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-03-31
Not rated	–		osint · ThreatFox IOCs for 2026-03-30 2026-03-30ThreatFox MISP Feed ThreatFox IOCs for 2026-03-30 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-03-30
Not rated	–		osint · ThreatFox IOCs for 2026-03-29 2026-03-29ThreatFox MISP Feed ThreatFox IOCs for 2026-03-29 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-03-29
Not rated	–		osint · ThreatFox IOCs for 2026-03-28 2026-03-28ThreatFox MISP Feed ThreatFox IOCs for 2026-03-28 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-03-28
Not rated	–		osint · ThreatFox IOCs for 2026-03-26 2026-03-26ThreatFox MISP Feed ThreatFox IOCs for 2026-03-26 Indicator type #type:osint #tlp:white United States+9	ThreatFox MISP Feed	2026-03-26

Showing 41–60 of 305 results