Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2021-28373 The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE… Tiny Tiny Rss 2021-03-12+ Fix from $1,9502021-03-13 MEDIUM 6.1 CVE-2020-25789 An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document. Tiny Tiny Rss 2020-09-16+ Fix from $1,6002020-09-19 CRITICAL 9.8 CVE-2020-25787EPSS 18% An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them. Tiny Tiny Rss 2020-09-16+ Fix from $2,3002020-09-19 HIGH 8.1 CVE-2020-25788 An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an… Tiny Tiny Rss 2020-09-16+ Fix from $1,9502020-09-19 CRITICAL 9.8 CVE-2017-16896 A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter. Tiny Tiny Rss Patch available Fix from $2,3002017-11-20 MEDIUM 6.1 CVE-2017-1000035 Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack Tiny Tiny Rss Mitigation only Fix from $1,6002017-07-17