Web vulnerabilities

CVEs whose affected-version data names the Web package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-34087Critical· 9.0PoC

1y ago

Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allowlist via the web interface, the domain parameter is not properly sanitized, allowing an attacker to append OS command…

▾ AbyssalPi-hole LLC · WebEPSS 7.0%via CVEORG