API - API Security Blog

CVE-2020-36725

creation_timestamp| type| source ---|---|--- 2025-09-10 21:02:30+00:00| seen|...Read More ...

September 10, 2025

CVE-2016-15042

creation_timestamp| type| source ---|---|--- 2025-09-10 21:02:29+00:00| seen|...Read More ...

September 10, 2025

CVE-2022-4971

creation_timestamp| type| source ---|---|--- 2025-09-10 21:02:32+00:00| seen|...Read More ...

September 10, 2025

CVE-2017-15919

creation_timestamp| type| source ---|---|--- 2025-09-10 21:02:30+00:00| seen|...Read More ...

September 10, 2025

EUVD-2025-27608

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware e ...

September 10, 2025

CVE-2025-43784

Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest us ...

September 10, 2025

CVE-2025-10210 yanyutao0402 ChanCMS Api.js search sql injection

A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manipulation of the argument key can lead to s ...

September 10, 2025

CVE-2025-59049 Mockoon has a Path Traversal and LFI in the static file serving endpoint

Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the serv ...

September 10, 2025