CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,294 CVEs published, 270 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,294
Show in the list
Critical, last 7 days
270
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product rallly:rallly. Show all products

10 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2025-66027High 7.1Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings
Assigned by GitHub_M
Nov 28, 2025
CVE-2025-65034High 8.1Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65033High 8.1Rallly Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65032Medium 6.5Rallly Has an IDOR Vulnerability in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65031Medium 6.5Rallly Improper Authorization in Comment Endpoint Allows User Impersonation
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65030High 7.1Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65029High 8.1Rallly Has an IDOR Vulnerability in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65021Critical 9.1Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65020Medium 6.5Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)
Assigned by GitHub_M
Nov 19, 2025
CVE-2025-65028Medium 6.5Rallly Has an IDOR Vulnerability in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Votes
Assigned by GitHub_M
Nov 19, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.