Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wr93-w764-3636 |
|
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesti… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-w8cx-4cf2-9hvr |
8.7 (4.0)
|
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that modu… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-q84r-gp7c-vfr3 |
|
A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do expone… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-j9vw-9527-3hx6 |
3.5 (3.1)
2.0 (4.0)
|
A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-cw6x-vx7r-8x4q |
|
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which … | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-8xvj-2pjr-73jq |
|
When Neethi fetches a remote policy reference, it only limits the time per read, not the whole tran… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-6vm6-6w33-f874 |
|
A small WS-Policy document using repeated policy references can force Neethi to re-expand the same … | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-5p5f-qvx9-whpj |
7.1 (3.1)
|
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooB… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-vrgw-vghm-5p74 |
7.2 (4.0)
|
Temporal Server decided whether a Workflow completion callback was internal by reading a caller-sup… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-vg3p-fxfm-m684 |
8.7 (4.0)
|
github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metada… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-2mhp-wpjp-pjr8 |
8.7 (4.0)
|
github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TCha… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-2cw5-f255-55f8 |
8.7 (4.0)
|
github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application change… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-pv35-7w89-v65c |
7.1 (4.0)
|
Temporal Server did not bound the work performed while searching for a Schedule's next action time.… | 2026-09-21T12:32:37Z | 2026-09-21T12:32:37Z |
| ghsa-7vcf-7m3r-v7x3 |
8.7 (4.0)
|
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a corres… | 2026-09-21T12:32:37Z | 2026-09-21T12:32:37Z |
| ghsa-rf8x-cp2v-q2fg |
5.1 (4.0)
|
Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side re… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-mhq8-392f-7m6m |
8.8 (3.1)
|
A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious che… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-gm83-3hcx-j6jj |
1.0 (4.0)
|
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable … | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-g9jq-gq4v-4rw3 |
8.7 (4.0)
|
temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version c… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:37Z |
| ghsa-8mcv-mp35-55rc |
6.3 (4.0)
|
MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galax… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-5q8h-fhcg-2395 |
5.3 (4.0)
|
Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-xfxp-2jm6-g29w |
5.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown fun… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-xf2r-mj9x-vg5q |
5.3 (3.1)
|
The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-r976-2rf7-fgwv |
4.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This i… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:10Z |
| ghsa-p5g8-hwm5-93cc |
3.7 (3.1)
|
The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in a… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-p33j-7gxx-7v4f |
5.3 (3.1)
|
The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that an… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-hwwr-jxp3-vffw |
2.4 (3.1)
1.9 (4.0)
|
A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element i… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-53fm-c92p-fxxw |
8.0 (3.1)
|
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CR… | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-4grg-xfv8-q8cj |
6.5 (3.1)
|
The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied … | 2026-09-21T09:31:09Z | 2026-09-21T09:31:09Z |
| ghsa-xr2h-v539-xc2h |
3.5 (3.1)
2.0 (4.0)
|
A vulnerability has been found in xuxueli xxl-job up to 3.4.2/3.5.0. This vulnerability affects unk… | 2026-09-21T09:31:08Z | 2026-09-21T09:31:08Z |
| ghsa-w3gv-q645-g39f |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExpor… | 2026-09-21T09:31:08Z | 2026-09-21T09:31:08Z |