Vulnerabilities

TI-2026-46830 CVE-2026-65696 · GHSA-wmhm-gprw-r443

Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

MEDIUM 57

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptio…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-07-23 No fix listed CWE-639

TI-2004-01808 CVE-2004-1935 · GHSA-c5g5-jm9m-cwhx

Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers…

LOW 24

Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0181 Published 2005-05-10 No fix listed

TI-2004-01469 CVE-2004-1593 · GHSA-w546-2ph3-cg79

Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus…

LOW 23

Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01255 Published 2005-02-20 No fix listed

Vulnerabilities

Filters

Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers…

Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus…