Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-68f5-7j6g-q5r2 |
9.1 (3.1)
|
The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a mi… | 2026-08-01T06:31:03Z | 2026-08-01T06:31:03Z |
| ghsa-x6w6-m8vc-m6cp |
8.8 (3.1)
|
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in ver… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-vvqx-954c-23g6 |
6.4 (3.1)
|
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vuln… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-v59p-52gm-jwpr |
4.9 (3.1)
|
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection v… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-j262-2rh9-xjv4 |
7.5 (3.1)
|
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin … | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-5jrx-957p-3f93 |
6.4 (3.1)
|
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Sc… | 2026-08-01T03:31:13Z | 2026-08-01T03:31:13Z |
| ghsa-4pwv-pmm4-fw4r |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject overs… | 2026-07-27T09:31:26Z | 2026-08-01T03:31:13Z |
| ghsa-4v8f-3c7h-9xrw |
8.5 (4.0)
|
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vu… | 2026-08-01T00:30:56Z | 2026-08-01T00:30:56Z |
| ghsa-xw47-r6m7-qrhr |
|
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-xgpf-25jc-xvgf |
9.6 (3.1)
|
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 al… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-w7m2-6chv-wg69 |
7.8 (3.1)
|
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary cod… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-m6mj-vrrh-w93x |
8.8 (3.1)
|
Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker wh… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-jhhh-39pj-vgq6 |
|
An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management m… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-j56f-72j5-v78h |
|
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-hmjv-q65w-xfr7 |
5.4 (3.1)
|
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-h8ww-33xv-qc27 |
6.5 (3.1)
|
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote atta… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-7wx4-25xq-m4j2 |
6.5 (3.1)
|
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-6p72-9j26-4rmx |
9.8 (3.1)
9.3 (4.0)
|
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node th… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-6c5f-9m5w-cq8h |
6.5 (3.1)
|
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allo… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-4pg7-2q5x-32w4 |
|
An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows a… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-j6g9-f586-p93v |
8.0 (3.1)
8.5 (4.0)
|
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows an adjacent … | 2026-02-02T18:31:33Z | 2026-08-01T00:30:54Z |
| ghsa-vmf9-6pcv-xr87 |
5.3 (3.1)
|
Withdrawn Advisory: Username enumeration attack in goauthentik | 2023-08-29T23:34:51Z | 2026-07-31T22:35:59Z |
| ghsa-vvp7-h4fj-m28w |
7.7 (3.1)
|
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to rea… | 2026-07-31T22:35:05Z | 2026-07-31T22:35:05Z |
| ghsa-g65v-27r3-5p6m |
6.9 (4.0)
|
guard-livereload has a directory traversal vulnerability | 2026-07-31T22:33:01Z | 2026-07-31T22:33:01Z |
| ghsa-c5px-58j2-7fqp |
6.2 (3.1)
|
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode | 2026-07-31T22:31:20Z | 2026-07-31T22:31:20Z |
| ghsa-jhh7-832h-f8hv |
6.9 (4.0)
|
WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + … | 2026-07-31T22:24:29Z | 2026-07-31T22:24:29Z |
| ghsa-pjp7-q6wp-97qx |
0.0 (3.1)
4.8 (4.0)
|
core-geonetwork has an Open Redirect Bypass | 2026-07-31T22:16:34Z | 2026-07-31T22:16:34Z |
| ghsa-m49c-g9wr-hv6v |
9.8 (3.1)
|
jinjava has Sandbox Bypass via JavaType-Based Deserialization | 2025-09-17T19:56:21Z | 2026-07-31T22:15:57Z |
| ghsa-993g-76c3-p5m4 |
4.2 (3.1)
|
PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://… | 2026-06-15T19:28:41Z | 2026-07-31T22:13:14Z |
| ghsa-fhv5-28vv-h8m8 |
3.7 (3.1)
|
PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) | 2026-06-15T17:28:46Z | 2026-07-31T22:13:02Z |