Threat database

16 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.6%	CVE-2026-94075Newsletters · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-10-24CVE Database V5CVE-2026-94075 Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1. EPSS 0.6%Vulnerability Tribulant Software	CVE Database V5	2026-10-24
Critical	9.3	EPSS 0.4%	CVE-2026-111402Newsletters · SQL Injection Critical9.3EPSS 0.4%2026-10-24CVE Database V5CVE-2026-111402 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1. EPSS 0.4%Vulnerability Tribulant Software	CVE Database V5	2026-10-24
High	7.6	EPSS 0.4%	CVE-2026-66619Newsletters · SQL Injection High7.6EPSS 0.4%2026-09-17CVE Database V5CVE-2026-66619 Administrator SQL Injection in Newsletters <= 4.18 versions. EPSS 0.4%Vulnerability Tribulant Software #cwe-89	CVE Database V5	2026-09-17
High	7.1	EPSS 0.3%	CVE-2026-57394Newsletters · Cross-site Scripting High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57394 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.14. EPSS 0.3%Vulnerability Tribulant Software	CVE Database V5	2026-07-13
High	8.1	EPSS 0.3%	CVE-2026-57645Newsletters · Missing Authorization High8.1EPSS 0.3%2026-06-26CVE Database V5CVE-2026-57645 newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. EPSS 0.3%Vulnerability Tribulant Software #cwe-862	CVE Database V5	2026-06-26
High	7.3	EPSS 0.3%	CVE-2026-54840Newsletters · Missing Authorization High7.3EPSS 0.3%2026-06-26CVE Database V5CVE-2026-54840 Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. EPSS 0.3%Vulnerability Tribulant Software #cwe-862	CVE Database V5	2026-06-26
Critical	9.8	EPSS 0.5%	CVE-2025-67911Newsletters · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67911 Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through <= 4.11. EPSS 0.5%Vulnerability Tribulant Software	CVE Database V5	2026-01-08
Medium	6.5	EPSS 0.2%	CVE-2025-69020Newsletters · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69020 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Stored XSS.This issue affects Newsletters: from n/a through <= 4.12. EPSS 0.2%Vulnerability Tribulant Software	CVE Database V5	2025-12-30
High	7.5	EPSS 0.6%	CVE-2025-54034Newsletters · PHP Remote File Inclusion High7.5EPSS 0.6%2025-08-20CVE Database V5CVE-2025-54034 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Tribulant Software Newsletters newsletters-lite allows PHP Local File Inclusion.This issue affects Newsletters: from n/a through <= 4.10. EPSS 0.6%Vulnerability Tribulant Software	CVE Database V5	2025-08-20
Medium	4.3	EPSS 0.1%	CVE-2025-54035Newsletters · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-07-16CVE Database V5CVE-2025-54035 Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through <= 4.10. EPSS 0.1%Vulnerability Tribulant Software	CVE Database V5	2025-07-16
High	7.1	EPSS 0.3%	CVE-2025-30858Snow Storm · Cross-site Scripting High7.1EPSS 0.3%2025-04-03CVE Database V5CVE-2025-30858 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Snow Storm snow-storm allows Reflected XSS.This issue affects Snow Storm: from n/a through <= 1.4.6. EPSS 0.3%Vulnerability Tribulant Software	CVE Database V5	2025-04-03
High	7.6	EPSS 0.5%	CVE-2025-30921Newsletters · SQL Injection High7.6EPSS 0.5%2025-03-27CVE Database V5CVE-2025-30921 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through <= 4.9.9.7. EPSS 0.5%Vulnerability Tribulant Software	CVE Database V5	2025-03-27
High	7.1	EPSS 0.1%	CVE-2025-26931Tribulant Gallery Voting · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-02-25CVE Database V5CVE-2025-26931 Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Tribulant Gallery Voting gallery-voting allows Stored XSS.This issue affects Tribulant Gallery Voting: from n/a through <= 1.2.1. EPSS 0.1%Vulnerability Tribulant Software	CVE Database V5	2025-02-25
High	7.1	EPSS 0.3%	CVE-2025-24599Newsletters · Cross-site Scripting High7.1EPSS 0.3%2025-02-04CVE Database V5CVE-2025-24599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.9.9.6. EPSS 0.3%Vulnerability Tribulant Software	CVE Database V5	2025-02-04
High	7.1	EPSS 0.3%	CVE-2024-47346Newsletters · Cross-site Scripting High7.1EPSS 0.3%2024-10-06CVE Database V5CVE-2024-47346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.9.9.1. EPSS 0.3%Vulnerability Tribulant Software	CVE Database V5	2024-10-06
Medium	5.9	EPSS 0.3%	CVE-2024-47376Slideshow Gallery · Cross-site Scripting Medium5.9EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Slideshow Gallery slideshow-gallery allows Cross-Site Scripting (XSS).This issue affects Slideshow Gallery: from n/a through <= 1.8.3. EPSS 0.3%Vulnerability Tribulant Software	CVE Database V5	2024-10-05

Showing 1–16 of 16 results