Priority CRITICAL 90
changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.85256 · Published 2024-04-25 · Fixed in 0.45.21 CWE-1336
Priority HIGH 82
changedetection.io is a free open source web page change detection tool.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00545 · Published 2026-04-07 · Fixed in 0.54.8 CWE-863
Priority HIGH 79
changedetection.io is a free open source web page change detection tool.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00586 · Published 2026-03-06 · Fixed in 0.54.4 CWE-22
Priority HIGH 77
changedetection.io through 0.60.6 fails to validate the Goto URL action in browser steps, allowing unauthenticated attackers to access internal addresses.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00541 · Published 2026-09-16 · No fix listed CWE-918
Priority HIGH 76
changedetection.io is a free open source web page change detection tool.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-02-25 · Fixed in 0.54.1 CWE-918
Priority HIGH 76
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00715 · Published 2024-12-27 · Fixed in 0.48.05 CWE-200
Priority HIGH 76
changedetection.io is a free open source web page change detection tool.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00688 · Published 2024-11-07 · Fixed in 0.47.06, 0.47.6 CWE-22
Priority HIGH 75
changedetection.io is a free open source web page change detection tool.
CVSS 4.0HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2026-03-27 · Fixed in 0.54.7 CWE-200
Priority HIGH 73
changedetection.io is a free open source web page change detection tool.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00538 · Published 2026-03-06 · Fixed in 0.54.4 CWE-94
Priority HIGH 72
changedetection.io is a free open source web page change detection tool.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-05-12 · Fixed in 0.55.1 CWE-73
Priority HIGH 70
A vulnerability was found in dgtlmoon changedetection.io up to 50389b07.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-09-22 · Fixed in 0.60.1 CWE-918
Priority HIGH 70
A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00654 · Published 2026-09-22 · No fix listed CWE-287
Priority HIGH 70
changedetection.io is free, open source web page change detection software.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02293 · Published 2024-11-01 · Fixed in 0.47.5 CWE-22
Priority MEDIUM 61
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00668 · Published 2026-09-22 · No fix listed CWE-22
Priority MEDIUM 61
A flaw has been found in dgtlmoon changedetection.io up to 0.60.7.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00443 · Published 2026-09-22 · No fix listed CWE-203
Priority MEDIUM 60
changedetection.io is a free open source web page change detection tool.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00319 · Published 2026-03-06 · Fixed in 0.54.4 CWE-79
Priority MEDIUM 60
changedetection.io is a free open source web page change detection tool.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00495 · Published 2026-02-25 · Fixed in 0.54.1, 0.53.7 CWE-79
Priority MEDIUM 58
changedetection.io is a free open source web page change detection tool.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00462 · Published 2025-11-10 · Fixed in 0.50.34 CWE-79
Priority MEDIUM 58
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00631 · Published 2023-02-17 · Fixed in 0.40.2 CWE-79
Priority MEDIUM 57
A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00517 · Published 2026-09-22 · No fix listed CWE-22
Priority MEDIUM 56
A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00416 · Published 2026-09-22 · Fixed in 0.60.1 CWE-79
Priority MEDIUM 53
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01281 · Published 2024-05-02 · Fixed in 0.45.22 CWE-79
Priority MEDIUM 51
changedetection.io is an open source tool designed to monitor websites for content changes.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00587 · Published 2024-01-19 · Fixed in 0.45.13 CWE-863
Priority MEDIUM 45
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.00296 · Published 2026-09-16 · No fix listed CWE-79
Priority LOW 35
changedetection.io is a free open source web page change detection tool.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00266 · Published 2026-05-12 · No fix listed CWE-611
Load more
THREATIST.IORead the docs