Vulnerabilities

Recent vulnerabilities

Recent vulnerabilities from 🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.

GitHub 🐙

Recent vulnerabilities · 375274 entries
ID Severity Description Published Updated
ghsa-wr93-w764-3636
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesti… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-w8cx-4cf2-9hvr
8.7 (4.0)
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that modu… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-q84r-gp7c-vfr3
A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do expone… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-j9vw-9527-3hx6
3.5 (3.1)
2.0 (4.0)
A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-cw6x-vx7r-8x4q
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which … 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-8xvj-2pjr-73jq
When Neethi fetches a remote policy reference, it only limits the time per read, not the whole tran… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-6vm6-6w33-f874
A small WS-Policy document using repeated policy references can force Neethi to re-expand the same … 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-5p5f-qvx9-whpj
7.1 (3.1)
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooB… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-vrgw-vghm-5p74
7.2 (4.0)
Temporal Server decided whether a Workflow completion callback was internal by reading a caller-sup… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-vg3p-fxfm-m684
8.7 (4.0)
github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metada… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-2mhp-wpjp-pjr8
8.7 (4.0)
github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TCha… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-2cw5-f255-55f8
8.7 (4.0)
github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application change… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-pv35-7w89-v65c
7.1 (4.0)
Temporal Server did not bound the work performed while searching for a Schedule's next action time.… 2026-09-21T12:32:37Z 2026-09-21T12:32:37Z
ghsa-7vcf-7m3r-v7x3
8.7 (4.0)
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a corres… 2026-09-21T12:32:37Z 2026-09-21T12:32:37Z
ghsa-rf8x-cp2v-q2fg
5.1 (4.0)
Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side re… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-mhq8-392f-7m6m
8.8 (3.1)
A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious che… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-gm83-3hcx-j6jj
1.0 (4.0)
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable … 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-g9jq-gq4v-4rw3
8.7 (4.0)
temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version c… 2026-09-21T12:32:36Z 2026-09-21T12:32:37Z
ghsa-8mcv-mp35-55rc
6.3 (4.0)
MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galax… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-5q8h-fhcg-2395
5.3 (4.0)
Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-xfxp-2jm6-g29w
5.3 (3.1)
5.5 (4.0)
A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown fun… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-xf2r-mj9x-vg5q
5.3 (3.1)
The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-r976-2rf7-fgwv
4.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This i… 2026-09-21T09:31:09Z 2026-09-21T09:31:10Z
ghsa-p5g8-hwm5-93cc
3.7 (3.1)
The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in a… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-p33j-7gxx-7v4f
5.3 (3.1)
The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-hwwr-jxp3-vffw
2.4 (3.1)
1.9 (4.0)
A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element i… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-53fm-c92p-fxxw
8.0 (3.1)
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CR… 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-4grg-xfv8-q8cj
6.5 (3.1)
The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied … 2026-09-21T09:31:09Z 2026-09-21T09:31:09Z
ghsa-xr2h-v539-xc2h
3.5 (3.1)
2.0 (4.0)
A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unk… 2026-09-21T09:31:08Z 2026-09-21T09:31:08Z
ghsa-w3gv-q645-g39f
5.3 (3.1)
5.5 (4.0)
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExpor… 2026-09-21T09:31:08Z 2026-09-21T09:31:08Z