Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-wordpress-2026-63030 | WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution | 2026-07-27T05:55:54.872Z | 2026-07-27T06:08:49.409Z |
| bit-wordpress-2026-60137 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query | 2026-07-27T05:55:53.343Z | 2026-07-27T06:08:49.409Z |
| bit-thrift-2026-43869 | Apache Thrift: TSSLTransportFactory.java hostname verification | 2026-05-07T08:53:17.253Z | 2026-07-27T06:08:49.409Z |
| bit-thrift-2026-43868 | Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern | 2026-05-07T08:53:15.762Z | 2026-07-27T06:08:49.409Z |
| bit-python-2026-4360 | Tarfile.extract() doesn't fully respect filter parameter | 2026-07-08T11:36:19.791Z | 2026-07-27T06:08:49.409Z |
| bit-prometheus-2026-42154 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload | 2026-07-14T15:49:19.565Z | 2026-07-27T06:08:49.409Z |
| bit-prometheus-2026-42151 | Prometheus Azure AD remote write OAuth client secret exposed via config API | 2026-07-15T15:58:00.968Z | 2026-07-27T06:08:49.409Z |
| bit-postgresql-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | 2026-05-18T05:53:06.189Z | 2026-07-27T06:08:49.409Z |
| bit-postgresql-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 2026-05-18T05:53:04.801Z | 2026-07-27T06:08:49.409Z |
| bit-postgresql-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | 2026-05-18T05:52:58.988Z | 2026-07-27T06:08:49.409Z |
| bit-pillow-2026-25990 | Pillow has an out-of-bounds write when loading PSD images | 2026-02-16T16:02:06.871Z | 2026-07-27T06:08:49.409Z |
| bit-php-2026-6722 | Use-After-Free in SOAP using Apache map | 2026-05-12T08:56:01.004Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-42186 | OpenBao's Namespace Deletion May Not Delete Data Properly | 2026-07-27T05:49:11.005Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-40264 | OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation | 2026-07-27T05:49:09.844Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-39946 | OpenBao allows SQL Injection in PostgreSQL database secrets engine | 2026-07-27T05:49:08.632Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-39396 | OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) | 2026-07-27T05:49:07.469Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-39388 | OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate | 2026-07-27T05:49:06.261Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-33758 | OpenBao has Reflected XSS in its OIDC authentication error message | 2026-07-27T05:49:05.059Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2026-33757 | OpenBao lacks user confirmation for OIDC direct callback mode | 2026-07-27T05:49:03.835Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-64761 | OpenBao Privileged Operator Identity Group Root Escalation | 2026-07-27T05:49:02.653Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-62705 | OpenBao and Vault Leak []byte Fields in Audit Logs | 2026-07-27T05:49:01.434Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-62513 | OpenBao leaks HTTPRawBody in Audit Logs | 2026-07-27T05:49:00.223Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-59043 | OpenBao vulnerable to denial of service via malicious JSON request processing | 2026-07-27T05:48:59.037Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-55003 | OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse | 2026-07-27T05:48:57.846Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-55001 | OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias | 2026-07-27T05:48:56.610Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-55000 | OpenBao TOTP Secrets Engine Enables Code Reuse | 2026-07-27T05:48:55.360Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-54999 | OpenBao: Timing Side-Channel in Userpass Auth Method | 2026-07-27T05:48:54.126Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-54998 | OpenBao Userpass and LDAP User Lockout Bypass | 2026-07-27T05:48:52.947Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-54997 | OpenBao: Privileged Operator May Execute Code on the Underlying Host | 2026-07-27T05:48:51.750Z | 2026-07-27T06:08:49.409Z |
| bit-openbao-2025-54996 | OpenBao Root Namespace Operator May Elevate Token Privileges | 2026-07-27T05:48:50.526Z | 2026-07-27T06:08:49.409Z |