API - API Security Blog

CVE-2025-4224

creation_timestamp| type| source ---|---|--- 2025-06-03 03:17:14+00:00| seen|...Read More ...

June 03, 2025

CVE-2025-4047

creation_timestamp| type| source ---|---|--- 2025-06-03 03:17:16+00:00| seen|...Read More ...

June 03, 2025

CVE-2025-2939

creation_timestamp| type| source ---|---|--- 2025-06-03 03:17:15+00:00| seen|...Read More ...

June 03, 2025

CrafterCMS Engine – Cross-Site Scripting

CrafterCMS Engine is vulnerable to reflected cross-site scripting (XSS) via the transformerName parameter in the /api/1/site/url/transform endpoint, allowing attackers to execute arbitrary JavaScript ...

June 03, 2025

CVE-2025-48996 Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint

HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University de ...

June 03, 2025

CVE-2025-5068

creation_timestamp| type| source ---|---|--- 2025-06-03 00:49:34+00:00| seen|...Read More ...

June 03, 2025

CVE-2025-5419

creation_timestamp| type| source ---|---|--- 2025-06-03 00:49:33+00:00| seen|...Read More ...

June 03, 2025

CVE-2025-3919

creation_timestamp| type| source ---|---|--- 2025-06-02 23:40:00+00:00| seen|...Read More ...

June 03, 2025