Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-7455 |
7.8 (3.1)
|
FLT File Parsing Out-of-Bounds Write Vulnerability in … |
Autodesk |
3ds Max |
2026-08-24T20:58:30.749Z | 2026-08-24T20:58:30.749Z |
| CVE-2026-77635 |
9.2 (4.0)
|
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQ… |
cakephp |
cakephp |
2026-08-24T20:30:34.492Z | 2026-08-24T20:30:34.492Z |
| CVE-2026-77634 |
8.2 (4.0)
|
CakePHP: SmtpTransport vulnerable to CRLF header injection |
cakephp |
cakephp |
2026-08-24T20:33:46.836Z | 2026-08-24T20:33:46.836Z |
| CVE-2026-77567 |
8.1 (3.1)
|
Filament: App-based MFA can be bypassed when recovery … |
filamentphp |
filament |
2026-08-24T20:10:58.326Z | 2026-08-24T20:10:58.326Z |
| CVE-2026-75554 |
2.3 (4.0)
|
Explicit organization scopes survive token refresh aft… |
hexpm |
hexpm |
2026-08-24T20:15:05.791Z | 2026-08-24T20:15:05.791Z |
| CVE-2026-75542 |
8.3 (4.0)
|
OAuth token exchange grants repository scopes for orga… |
hexpm |
hexpm |
2026-08-24T20:14:30.191Z | 2026-08-24T20:14:30.191Z |
| CVE-2026-75464 |
N/A
|
OneNav 1.2.4 contains an authenticated arbitrary … |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:23:28.910Z |
| CVE-2026-5006 |
6.8 (3.1)
|
Vault Vulnerable to Privilege Escalation via Slash Inj… |
HashiCorp |
Vault |
2026-08-24T20:32:49.396Z | 2026-08-24T20:32:49.396Z |
| CVE-2026-56136 |
N/A
|
In NTFS-3G through 2026.2.25, an out-of-bounds re… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:16:33.283Z |
| CVE-2026-56135 |
N/A
|
In NTFS-3G through 2026.2.25, a heap-based buffer… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:19:06.762Z |
| CVE-2026-55468 |
4.3 (3.1)
|
Wagtail: Improper restriction handling on Pages admin API |
wagtail |
wagtail |
2026-08-24T20:37:36.460Z | 2026-08-24T20:37:36.460Z |
| CVE-2026-52492 |
N/A
|
An integer overflow in the libtiff rgb2ycbcr util… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:29:29.368Z |
| CVE-2026-52490 |
N/A
|
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b89… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:37:51.758Z |
| CVE-2026-19568 |
7.8 (3.1)
|
SVG File Parsing Memory Corruption Vulnerability in Au… |
Autodesk |
3ds Max |
2026-08-24T20:59:44.839Z | 2026-08-24T20:59:44.839Z |
| CVE-2026-16783 |
7.8 (3.1)
|
ABC File Parsing Out-of-Bounds Write Vulnerability in … |
Autodesk |
3ds Max |
2026-08-24T20:56:43.477Z | 2026-08-24T20:56:43.477Z |
| CVE-2026-16782 |
5.3 (3.1)
|
SVG File Parsing Out-of-Bounds Read Vulnerability in A… |
Autodesk |
3ds Max |
2026-08-24T20:56:16.841Z | 2026-08-24T20:56:16.841Z |
| CVE-2026-16781 |
5.5 (3.1)
|
SVG File Parsing Stack Exhaustion Vulnerability in Aut… |
Autodesk |
3ds Max |
2026-08-24T20:55:41.015Z | 2026-08-24T20:55:41.015Z |
| CVE-2022-30983 |
N/A
|
A cross-site scripting (XSS) vulnerability in Sup… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T20:26:49.067Z |
| CVE-2026-78555 |
9.4 (4.0)
|
RansomLook API Key Disclosure Through /admin/apikeys H… |
ransomlook |
ransomlook |
2026-08-24T19:38:50.437Z | 2026-08-24T20:05:50.104Z |
| CVE-2026-78553 |
7 (4.0)
|
Insecure Flask Secret-Key File Permissions Allow Local… |
ransomlook |
ransomlook |
2026-08-24T19:28:49.323Z | 2026-08-24T20:07:07.041Z |
| CVE-2026-78551 |
8.8 (4.0)
|
RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:20:03.145Z | 2026-08-24T20:07:41.242Z |
| CVE-2026-78430 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
sworddut mcp-ffmpeg-helper Tool handlers.ts handleTool… |
sworddut |
mcp-ffmpeg-helper |
2026-08-24T19:45:08.359Z | 2026-08-24T19:58:40.163Z |
| CVE-2026-77923 |
5.3 (4.0)
4.3 (3.1)
|
Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clon… |
Dolibarr |
dolibarr |
2026-08-24T19:23:28.160Z | 2026-08-24T20:01:56.501Z |
| CVE-2026-77310 |
5.3 (3.1)
|
jackson-databind: Eager DNS resolution (SSRF) still pr… |
FasterXML |
com.fasterxml.jackson.core:jackson-databind |
2026-08-24T19:24:59.115Z | 2026-08-24T19:24:59.115Z |
| CVE-2026-76816 |
3.5 (3.1)
|
Netty: MQTT Topic Name and Client ID Validation Bypass |
netty |
netty |
2026-08-24T19:53:12.737Z | 2026-08-24T19:53:12.737Z |
| CVE-2026-76098 |
7.5 (3.1)
|
Mistune has Denial of Service — RecursionError via Exc… |
lepture |
mistune |
2026-08-24T20:05:00.932Z | 2026-08-24T20:17:07.057Z |
| CVE-2026-75509 |
6.5 (3.1)
|
joserfc claim-validation bypass via array-typed single… |
authlib |
joserfc |
2026-08-24T20:08:07.088Z | 2026-08-24T20:08:07.088Z |
| CVE-2026-75369 |
N/A
|
An out-of-bounds read vulnerability in the CAN::A… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T19:54:02.799Z |
| CVE-2026-75368 |
N/A
|
A stack overflow in the loadRawData function of S… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-24T19:57:32.379Z |
| CVE-2026-72714 |
6.8 (4.0)
6.3 (3.1)
|
Rocq Prover through 9.2.0 Universe Checking State Desy… |
rocq-prover |
rocq |
2026-08-24T20:08:33.917Z | 2026-08-24T20:08:33.917Z |