Threat database

23 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-111837Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… Medium6.5EPSS 0.2%2026-10-21CVE Database V5CVE-2026-111837 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 34.0.1. EPSS 0.2%Vulnerability Wasiliy Strecker	CVE Database V5	2026-10-21
High	7.1	EPSS 0.3%	CVE-2026-61986Contest Gallery · Cross-site Scripting High7.1EPSS 0.3%2026-08-19CVE Database V5CVE-2026-61986 CVE-2026-61986 is a high-severity Cross-Site Scripting (XSS) vulnerability in Wasiliy Strecker's Contest Gallery software versions up to and including 30.0.5. The vulnerability allows unauthenticated attackers to inject malicious scripts during web page generation due to improper input neutralization. This flaw can lead to partial compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.3%Vulnerability Wasiliy Strecker #cwe-79	CVE Database V5	2026-08-19
High	7.1	EPSS 0.3%	CVE-2026-65447Contest Gallery · Cross-site Scripting High7.1EPSS 0.3%2026-07-27CVE Database V5CVE-2026-65447 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer #cwe-79	CVE Database V5	2026-07-27
High	8.5	EPSS 0.4%	CVE-2026-57662Contest Gallery · SQL Injection High8.5EPSS 0.4%2026-06-26CVE Database V5CVE-2026-57662 Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. EPSS 0.4%Vulnerability Wasiliy Strecker #cwe-89	CVE Database V5	2026-06-26
Medium	6.5	EPSS 0.4%	CVE-2026-42660Contest Gallery · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium6.5EPSS 0.4%2026-06-15CVE Database V5CVE-2026-42660 CVE-2026-42660 is a vulnerability in Wasiliy Strecker's Contest Gallery product that allows exposure of subscriber sensitive data to unauthorized parties. It affects versions up to and including 28.1.7. The vulnerability is classified under CWE-497, indicating exposure of sensitive system information to an unauthorized control sphere. The CVSS 3.1 base score is 6.5, reflecting a medium severity with high confidentiality impact but no integrity or availability impact. No official patch or remediation guidance is currently available from the vendor. EPSS 0.4%Vulnerability Wasiliy Strecker #cwe-497	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.3%	CVE-2026-42657Contest Gallery · Improper Validation of Specified Quantity in Input Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42657 Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. EPSS 0.3%Vulnerability Wasiliy Strecker #cwe-1284	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.2%	CVE-2026-42656Contest Gallery · Cross-site Scripting Medium6.5EPSS 0.2%2026-06-15CVE Database V5CVE-2026-42656 Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. EPSS 0.2%Vulnerability Wasiliy Strecker #cwe-79	CVE Database V5	2026-06-15
Critical	9.3	EPSS 0.4%	CVE-2026-40771Contest Gallery · SQL Injection Critical9.3EPSS 0.4%2026-06-15CVE Database V5CVE-2026-40771 Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. EPSS 0.4%Vulnerability Wasiliy Strecker #cwe-89	CVE Database V5	2026-06-15
Critical	9.8	EPSS 0.5%	CVE-2026-42680Contest Gallery Pro · Incorrect Privilege Assignment Critical9.8EPSS 0.5%2026-06-01CVE Database V5CVE-2026-42680 Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro: from n/a through 29.0.1. EPSS 0.5%Vulnerability Wasiliy Strecker / ContestGallery developer #cwe-266	CVE Database V5	2026-06-01
Critical	9.8	EPSS 0.4%	CVE-2026-25035Contest Gallery · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25035 Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2. EPSS 0.4%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-03-25
Medium	6.4	EPSS 0.2%	CVE-2026-24964Contest Gallery · Server-Side Request Forgery (SSRF) Medium6.4EPSS 0.2%2026-03-25CVE Database V5CVE-2026-24964 Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1. EPSS 0.2%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-03-25
Medium	4.3	EPSS 0.2%	CVE-2026-24965Contest Gallery · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24965 Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1. EPSS 0.2%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-02-03
Medium	4.3	EPSS 0.1%	CVE-2025-62950Contest Gallery · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-11-06CVE Database V5CVE-2025-62950 Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0. EPSS 0.1%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-11-06
High	7.1	EPSS 0.3%	CVE-2025-48291Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… High7.1EPSS 0.3%2025-07-16CVE Database V5CVE-2025-48291 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 26.0.6. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-07-16
High	7.6	EPSS 0.6%	CVE-2025-22693Contest Gallery · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Wasiliy… High7.6EPSS 0.6%2025-02-03CVE Database V5CVE-2025-22693 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through <= 25.1.0. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-02-03
Medium	5.9	EPSS 0.3%	CVE-2024-56237Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… Medium5.9EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-01-02
Medium	5.3	EPSS 1.1%	CVE-2024-43283Contest Gallery · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 1.1%2024-08-26CVE Database V5CVE-2024-43283 Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2. EPSS 1.1%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-08-26
High	7.1	EPSS 0.3%	CVE-2024-39631Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… High7.1EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39631 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-08-01
High	8.5	EPSS 0.6%	CVE-2024-32778Contest Gallery · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wasiliy Strecker /… High8.5EPSS 0.6%2024-06-09CVE Database V5CVE-2024-32778 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-06-09

Showing 1–20 of 23 results · 1 duplicate CVE record merged