Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.3	EPSS 0.3%	CVE-2026-111638sshportal · Missing Authorization High8.3EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111638 sshportal versions up to 1.19.5 have a missing authorization vulnerability in the management shell 'key show' command. This flaw allows authenticated non-admin users to retrieve decrypted backend private SSH keys by requesting predictable key names such as 'default' or 'host'. Exploiting this vulnerability enables attackers to connect directly to backend hosts, bypassing access control lists (ACLs) and session recording mechanisms. EPSS 0.3%Vulnerability moul #ghsa-xmw3-crh7-9hmm	CVE Database V5	2026-10-16
Medium	6.5	EPSS 0.3%	CVE-2025-28930List Mixcloud · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Rodolphe… Medium6.5EPSS 0.3%2025-03-11CVE Database V5CVE-2025-28930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rodolphe MOULIN List Mixcloud list-mixcloud allows Stored XSS.This issue affects List Mixcloud: from n/a through <= 1.4. EPSS 0.3%Vulnerability Rodolphe MOULIN	CVE Database V5	2025-03-11
Medium	6.5	EPSS 0.5%	CVE-2025-23527WC Wallet · Missing Authorization Medium6.5EPSS 0.5%2025-02-03CVE Database V5CVE-2025-23527 Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WC Wallet: from n/a through <= 2.2.0. EPSS 0.5%Vulnerability hemnathmouli	CVE Database V5	2025-02-03

Showing 1–3 of 3 results