Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 86 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-125704 |
7.5 (3.1)
|
Gstreamer: gstreamer: use-after-free in gstreamer core… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-11-10T10:43:20.844Z | 2026-11-10T10:43:20.844Z |
| CVE-2026-124684 |
5.1 (3.1)
|
This issue can cause a heap-use-after-free when a… |
Samsung Open Source |
Escargot |
2026-11-09T11:28:07.068Z | 2026-11-10T10:30:58.804Z |
| CVE-2026-23903 |
5.3 (3.1)
|
Apache Shiro: Auth bypass when accessing static files … |
Apache Software Foundation |
Apache Shiro |
2026-02-09T09:26:21.772Z | 2026-11-10T09:50:30.969Z |
| CVE-2026-124503 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
sooperset mcp-atlassian io.py validate_safe_path path … |
sooperset |
mcp-atlassian |
2026-11-10T09:45:23.113Z | 2026-11-10T09:45:23.113Z |
| CVE-2026-104619 |
7.8 (3.1)
|
PackageKit ZYpp rollback vulnerability |
PackageKit |
PackageKit |
2026-11-10T09:27:53.111Z | 2026-11-10T09:27:53.111Z |
| CVE-2026-125063 |
4.3 (3.1)
|
Automation-controller: automation-controller: quadrati… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-11-09T17:51:45.812Z | 2026-11-10T08:56:26.179Z |
| CVE-2026-60046 |
8.7 (4.0)
7.5 (3.1)
|
DoS via password reset |
MB connect line |
mbCONNECT24 |
2026-11-10T08:38:30.814Z | 2026-11-10T08:38:30.814Z |
| CVE-2026-60045 |
6.9 (4.0)
4.9 (3.1)
|
Arbitrary file upload |
MB connect line |
mbCONNECT24 |
2026-11-10T08:38:08.612Z | 2026-11-10T08:38:08.612Z |
| CVE-2026-60044 |
8.7 (4.0)
7.5 (3.1)
|
Static backup password |
MB connect line |
mbCONNECT24 |
2026-11-10T08:37:50.850Z | 2026-11-10T08:37:50.850Z |
| CVE-2026-60043 |
6.4 (4.0)
9.3 (3.1)
|
XSS in backend |
MB connect line |
mbCONNECT24 |
2026-11-10T08:37:34.581Z | 2026-11-10T08:37:34.581Z |
| CVE-2026-60042 |
6.9 (4.0)
5.3 (3.1)
|
Authentication bypass in com_check |
MB connect line |
mbCONNECT24 |
2026-11-10T08:37:13.019Z | 2026-11-10T08:37:13.019Z |
| CVE-2026-60041 |
5.3 (4.0)
8.1 (3.1)
|
CSRF in backend |
MB connect line |
mbCONNECT24 |
2026-11-10T08:36:51.438Z | 2026-11-10T08:36:51.438Z |
| CVE-2026-60040 |
8.7 (4.0)
7.5 (3.1)
|
DoS in backup creation |
MB connect line |
mbCONNECT24 |
2026-11-10T08:36:20.325Z | 2026-11-10T08:36:20.325Z |
| CVE-2026-60039 |
8.6 (4.0)
7.2 (3.1)
|
Command injection in backup restore |
MB connect line |
mbCONNECT24 |
2026-11-10T08:36:02.773Z | 2026-11-10T08:36:02.773Z |
| CVE-2026-60038 |
8.6 (4.0)
7.2 (3.1)
|
OpenSSL command injection in ImportPKCS12 |
MB connect line |
mbCONNECT24 |
2026-11-10T08:35:49.775Z | 2026-11-10T08:35:49.775Z |
| CVE-2026-60037 |
8.6 (4.0)
7.2 (3.1)
|
OpenSSL command injection in device importer |
MB connect line |
mbCONNECT24 |
2026-11-10T08:35:37.141Z | 2026-11-10T08:35:37.141Z |
| CVE-2026-60036 |
8.6 (4.0)
7.2 (3.1)
|
Command injection in patch activate |
MB connect line |
mbCONNECT24 |
2026-11-10T08:35:20.368Z | 2026-11-10T08:35:20.368Z |
| CVE-2026-60035 |
8.6 (4.0)
7.2 (3.1)
|
Command injection in network auth |
MB connect line |
mbCONNECT24 |
2026-11-10T08:35:06.319Z | 2026-11-10T08:35:06.319Z |
| CVE-2026-103112 |
7.5 (3.1)
|
Keycloak-services: keycloak-services: account takeover… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-11-05T16:04:47.843Z | 2026-11-10T08:23:20.427Z |
| CVE-2026-106025 |
5.3 (3.1)
|
Cargo Shipping Location for WooCommerce 4.0.0 - 5.7.1 … |
Unknown |
Cargo Shipping Location for WooCommerce |
2026-11-10T08:22:39.682Z | 2026-11-10T08:22:39.682Z |
| CVE-2026-106007 |
5.3 (3.1)
|
FraudLabs Pro SMS Verification <= 1.12.1 - Unauthentic… |
Unknown |
FraudLabs Pro SMS Verification |
2026-11-10T08:22:39.197Z | 2026-11-10T08:22:39.197Z |
| CVE-2026-120013 |
7.5 (3.1)
|
Path Traversal in Agent Memory Module of SAP Cloud SDK… |
SAP_SE |
SAP Cloud SDK for Python |
2026-11-10T08:05:17.340Z | 2026-11-10T08:20:41.214Z |
| CVE-2026-50240 |
8.8 (3.1)
|
Pipelines-as-code: openshift-pipelines-operator-rh: pi… |
|
|
2026-11-06T21:53:53.997Z | 2026-11-10T08:08:55.224Z |
| CVE-2026-120012 |
7.5 (3.1)
|
Information Disclosure vulnerability in SAP Cloud SDK … |
SAP_SE |
SAP Cloud SDK for AI(JavaScript) |
2026-11-10T08:04:43.305Z | 2026-11-10T08:04:43.305Z |
| CVE-2026-65059 |
7.5 (3.1)
|
Furl versions before 3.16 for Perl allow memory exhaus… |
|
|
2026-11-02T17:01:28.306Z | 2026-11-10T07:47:57.308Z |
| CVE-2026-125652 |
6.8 (3.1)
|
Keycloak-services: keycloak-services: client-level man… |
Red Hat |
Red Hat Build of Keycloak |
2026-11-10T07:43:39.678Z | 2026-11-10T07:43:39.678Z |
| CVE-2026-61949 |
9.3 (3.1)
|
WordPress Bookly plugin <= 27.7 - SQL Injection vulner… |
Bookly |
Bookly |
2026-07-23T11:18:28.614Z | 2026-11-10T06:55:08.312Z |
| CVE-2026-84938 |
7.2 (3.1)
|
Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Sto… |
themefusion |
Avada (Fusion) Builder |
2026-11-10T06:47:03.257Z | 2026-11-10T06:47:03.257Z |
| CVE-2026-93427 |
7.2 (3.1)
|
ARMember Premium <= 7.8.1 - Unauthenticated Stored Cro… |
armember |
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup |
2026-11-10T06:47:02.854Z | 2026-11-10T06:47:02.854Z |
| CVE-2026-100386 |
7.5 (3.1)
|
Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenti… |
themefic |
Ultra Addons for Contact Form 7 |
2026-11-10T06:47:02.428Z | 2026-11-10T06:47:02.428Z |