Threat database

15 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-65447Contest Gallery · Cross-site Scripting High7.1EPSS 0.3%2026-07-27CVE Database V5CVE-2026-65447 Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer #cwe-79	CVE Database V5	2026-07-27
Critical	9.8	EPSS 0.5%	CVE-2026-42680Contest Gallery Pro · Incorrect Privilege Assignment Critical9.8EPSS 0.5%2026-06-01CVE Database V5CVE-2026-42680 Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro: from n/a through 29.0.1. EPSS 0.5%Vulnerability Wasiliy Strecker / ContestGallery developer #cwe-266	CVE Database V5	2026-06-01
Critical	9.8	EPSS 0.4%	CVE-2026-25035Contest Gallery · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25035 Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2. EPSS 0.4%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-03-25
Medium	6.4	EPSS 0.2%	CVE-2026-24964Contest Gallery · Server-Side Request Forgery (SSRF) Medium6.4EPSS 0.2%2026-03-25CVE Database V5CVE-2026-24964 Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1. EPSS 0.2%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-03-25
Medium	4.3	EPSS 0.2%	CVE-2026-24965Contest Gallery · Missing Authorization Medium4.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24965 Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1. EPSS 0.2%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2026-02-03
Medium	4.3	EPSS 0.1%	CVE-2025-62950Contest Gallery · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-11-06CVE Database V5CVE-2025-62950 Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0. EPSS 0.1%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-11-06
High	7.1	EPSS 0.3%	CVE-2025-48291Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… High7.1EPSS 0.3%2025-07-16CVE Database V5CVE-2025-48291 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 26.0.6. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-07-16
High	7.6	EPSS 0.6%	CVE-2025-22693Contest Gallery · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Wasiliy… High7.6EPSS 0.6%2025-02-03CVE Database V5CVE-2025-22693 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through <= 25.1.0. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-02-03
Medium	5.9	EPSS 0.3%	CVE-2024-56237Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… Medium5.9EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56237 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2025-01-02
Medium	5.3	EPSS 1.1%	CVE-2024-43283Contest Gallery · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 1.1%2024-08-26CVE Database V5CVE-2024-43283 Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2. EPSS 1.1%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-08-26
High	7.1	EPSS 0.3%	CVE-2024-39631Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… High7.1EPSS 0.3%2024-08-01CVE Database V5CVE-2024-39631 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2. EPSS 0.3%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-08-01
High	8.5	EPSS 0.6%	CVE-2024-32778Contest Gallery · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wasiliy Strecker /… High8.5EPSS 0.6%2024-06-09CVE Database V5CVE-2024-32778 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-06-09
High	7.1	EPSS 0.4%	CVE-2024-30428Contest Gallery · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Wasiliy… High7.1EPSS 0.4%2024-03-29CVE Database V5CVE-2024-30428 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3. EPSS 0.4%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-03-29
High	8.5	EPSS 0.6%	CVE-2024-30236Contest Gallery · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Wasiliy… High8.5EPSS 0.6%2024-03-28CVE Database V5CVE-2024-30236 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-03-28
High	8.5	EPSS 0.6%	CVE-2024-30238Contest Gallery · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Wasiliy… High8.5EPSS 0.6%2024-03-27CVE Database V5CVE-2024-30238 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.2. EPSS 0.6%Vulnerability Wasiliy Strecker / ContestGallery developer	CVE Database V5	2024-03-27

Showing 1–15 of 15 results