Threat database

11 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-94668Salon booking system · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Dimitri Grassi… High7.1EPSS 0.2%2026-10-09CVE Database V5CVE-2026-94668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5. EPSS 0.2%Vulnerability Dimitri Grassi	CVE Database V5	2026-10-09
High	8.8	EPSS 0.3%	CVE-2026-105070Salon booking system · Incorrect Privilege Assignment High8.8EPSS 0.3%2026-10-06CVE Database V5CVE-2026-105070 Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions. EPSS 0.3%Vulnerability Dimitri Grassi #cwe-266	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.3%	CVE-2026-81793Salon booking system · Missing Authorization Medium6.5EPSS 0.3%2026-09-10CVE Database V5CVE-2026-81793 CVE-2026-81793 is a Missing Authorization vulnerability in the Dimitri Grassi Salon booking system affecting versions from initial through 10.31.9. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. There is no evidence of known exploits in the wild, and no official patch or remediation guidance has been provided yet. EPSS 0.3%Vulnerability Dimitri Grassi #cwe-862	CVE Database V5	2026-09-10
Critical	9.8	EPSS 0.6%	CVE-2026-66453Salon booking system · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.6%2026-08-13CVE Database V5CVE-2026-66453 Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions. EPSS 0.6%Vulnerability Dimitri Grassi #cwe-288 #ghsa-w4wg-6w3x-96hc	CVE Database V5	2026-08-13
High	7.3	EPSS 0.3%	CVE-2026-40768Salon booking system · Authorization Bypass Through User-Controlled Key High7.3EPSS 0.3%2026-06-17CVE Database V5CVE-2026-40768 CVE-2026-40768 is a high-severity vulnerability in the Dimitri Grassi Salon booking system versions up to and including 10.30.24. It involves an unauthenticated Insecure Direct Object Reference (IDOR) that allows authorization bypass through user-controlled keys. This flaw can lead to unauthorized access to sensitive information or modification of data without authentication. EPSS 0.3%Vulnerability Dimitri Grassi #cwe-639	CVE Database V5	2026-06-17
High	7.5	EPSS 0.4%	CVE-2026-42666Salon booking system · Missing Authorization High7.5EPSS 0.4%2026-06-15CVE Database V5CVE-2026-42666 Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions. EPSS 0.4%Vulnerability Dimitri Grassi #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.4%	CVE-2025-67954Salon booking system · Exposure of Sensitive System Information to an Unauthorized Control Sphere in Dimitri Grassi Salon… Medium6.5EPSS 0.4%2026-01-22CVE Database V5CVE-2025-67954 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3. EPSS 0.4%Vulnerability Dimitri Grassi	CVE Database V5	2026-01-22
Medium	4.3	EPSS 0.2%	CVE-2025-66531Salon booking system · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-12-09CVE Database V5CVE-2025-66531 Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3. EPSS 0.2%Vulnerability Dimitri Grassi #cwe-352	CVE Database V5	2025-12-09
Medium	5.4	EPSS 0.5%	CVE-2025-32220Salon booking system · Missing Authorization Medium5.4EPSS 0.5%2025-04-04CVE Database V5CVE-2025-32220 Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9. EPSS 0.5%Vulnerability Dimitri Grassi #cwe-862	CVE Database V5	2025-04-04
High	7.2	EPSS 0.6%	CVE-2025-31560Salon booking system · Incorrect Privilege Assignment High7.2EPSS 0.6%2025-04-01CVE Database V5CVE-2025-31560 Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through < 10.15. EPSS 0.6%Vulnerability Dimitri Grassi	CVE Database V5	2025-04-01
Medium	4.3	EPSS 0.3%	CVE-2024-47316Salon booking system · Authorization Bypass Through User-Controlled Key Medium4.3EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47316 Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through <= 10.9. EPSS 0.3%Vulnerability Dimitri Grassi	CVE Database V5	2024-10-05

Showing 1–11 of 11 results