Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.5%	CVE-2026-42719Dynamic User Directory · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-10-10CVE Database V5CVE-2026-42719 CVE-2026-42719 is a critical vulnerability in Sarah Giles Dynamic User Directory versions 2.4 and earlier. It involves PHP Object Injection due to deserialization of untrusted data, which can lead to full compromise of confidentiality, integrity, and availability without requiring user interaction. EPSS 0.5%Vulnerability Sarah Giles #cwe-502	CVE Database V5	2026-10-10
High	7.6	EPSS 0.2%	CVE-2026-42720Dynamic User Directory · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sarah Giles… High7.6EPSS 0.2%2026-10-07CVE Database V5CVE-2026-42720 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4. EPSS 0.2%Vulnerability Sarah Giles	CVE Database V5	2026-10-07
Medium	5.9	EPSS 0.2%	CVE-2025-62982Dynamic User Directory · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Sarah Giles… Medium5.9EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62982 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through <= 2.3. EPSS 0.2%Vulnerability Sarah Giles	CVE Database V5	2025-10-27

Showing 1–3 of 3 results