Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-x6w6-m8vc-m6cp |
8.8 (3.1)
|
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in ver… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-vvqx-954c-23g6 |
6.4 (3.1)
|
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vuln… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-v59p-52gm-jwpr |
4.9 (3.1)
|
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection v… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-j262-2rh9-xjv4 |
7.5 (3.1)
|
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin … | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-5jrx-957p-3f93 |
6.4 (3.1)
|
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Sc… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-4v8f-3c7h-9xrw |
8.5 (4.0)
|
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vu… | 2026-08-01T00:30:56Z | 2026-08-01T00:30:56Z |
| ghsa-xw47-r6m7-qrhr |
|
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-w7m2-6chv-wg69 |
7.8 (3.1)
|
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary cod… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-jhhh-39pj-vgq6 |
|
An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management m… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-j56f-72j5-v78h |
|
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-6p72-9j26-4rmx |
9.8 (3.1)
9.3 (4.0)
|
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node th… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-4pg7-2q5x-32w4 |
|
An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows a… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-vvp7-h4fj-m28w |
7.7 (3.1)
|
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to rea… | 2026-07-31T22:35:05Z | 2026-07-31T22:35:05Z |
| ghsa-g65v-27r3-5p6m |
6.9 (4.0)
|
guard-livereload has a directory traversal vulnerability | 2026-07-31T22:33:01Z | 2026-07-31T22:33:01Z |
| ghsa-c5px-58j2-7fqp |
6.2 (3.1)
|
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode | 2026-07-31T22:31:20Z | 2026-07-31T22:31:20Z |
| ghsa-jhh7-832h-f8hv |
6.9 (4.0)
|
WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + … | 2026-07-31T22:24:29Z | 2026-07-31T22:24:29Z |
| ghsa-pjp7-q6wp-97qx |
0.0 (3.1)
4.8 (4.0)
|
core-geonetwork has an Open Redirect Bypass | 2026-07-31T22:16:34Z | 2026-07-31T22:16:34Z |
| ghsa-wg4g-wm44-ch5j |
6.3 (4.0)
|
Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExch… | 2026-07-31T22:06:33Z | 2026-07-31T22:06:33Z |
| ghsa-34rh-wp3j-6cxc |
5.3 (3.1)
|
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADD… | 2026-07-31T22:03:42Z | 2026-07-31T22:03:42Z |
| ghsa-wqqc-jjcq-vfxm |
3.1 (3.1)
|
sigstore-go fails to check signature timestamps against a signing key's validity period | 2026-07-31T21:58:39Z | 2026-07-31T21:58:39Z |
| ghsa-wf43-fpp3-cf65 |
8.7 (3.1)
|
@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into… | 2026-07-31T21:53:56Z | 2026-07-31T21:53:56Z |
| ghsa-34pj-2622-jvxq |
3.7 (3.1)
|
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header | 2026-07-31T21:51:41Z | 2026-07-31T21:51:41Z |
| ghsa-6h5j-32cf-4253 |
9.1 (3.1)
|
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to p… | 2026-07-31T21:49:25Z | 2026-07-31T21:49:25Z |
| ghsa-vccv-cmxp-4j9h |
5.4 (3.1)
|
sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, … | 2026-07-31T21:43:51Z | 2026-07-31T21:43:52Z |
| ghsa-jhr6-gm9c-rqjv |
9.8 (3.1)
9.3 (4.0)
|
sentence-transformers contains a security control bypass vulnerability that allows attackers to ach… | 2026-07-31T21:31:59Z | 2026-07-31T21:31:59Z |
| ghsa-8mxp-hf23-8hp4 |
|
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary c… | 2026-07-31T21:31:59Z | 2026-07-31T21:31:59Z |
| ghsa-5vj7-f9mv-5q68 |
|
PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSR… | 2026-07-31T21:31:59Z | 2026-07-31T21:31:59Z |
| ghsa-r4gp-3c4m-74m2 |
|
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR30… | 2026-07-31T21:31:57Z | 2026-07-31T21:31:57Z |
| ghsa-pw34-h6wh-m8r2 |
|
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR30… | 2026-07-31T21:31:57Z | 2026-07-31T21:31:57Z |
| ghsa-hwxp-8fwh-7vcp |
|
TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in t… | 2026-07-31T21:31:57Z | 2026-07-31T21:31:57Z |