Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20119 |
5.1 (4.0)
|
Stored Server-Side Request Forgery in Remote-Instance … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:39:44.249540Z | 2026-08-12T14:40:10.120021Z |
| GCVE-1-2026-20159 |
8.8 (4.0)
|
Reusable Account Activation and Recovery Tokens Allow … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:32:19.932784Z | 2026-08-12T14:32:52.007745Z |
| GCVE-1-2026-20034 |
5.3 (4.0)
|
Authorization Bypass in SSE Pub/Sub Allows Unconfirmed… |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:15:40.983661Z | 2026-08-12T14:15:52.569796Z |
| GCVE-1-2026-20126 |
6.1 (4.0)
|
Stored Cross-Site Scripting (XSS) via Unescaped CNA Re… |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:05:21.920479Z | 2026-08-12T14:05:33.500349Z |
| GCVE-1-2026-20051 |
5.1 (4.0)
|
Server-Side Request Forgery via Favicon Retrieval in L… |
Lookyloo |
PlaywrightCapture |
2026-08-11T13:59:00.000Z | 2026-08-11T14:06:34.155965Z |
| GCVE-1-2026-20115 |
5.3 (4.0)
|
cti-transmute CSRF Allows Unauthorized Follow and Noti… |
MISP |
cti-transmute |
2026-08-11T09:13:01.966628Z | 2026-08-11T09:13:12.572758Z |
| GCVE-1-2026-20177 |
5.1 (4.0)
|
cti-transmute Conversion Table Allows XSS via Unescape… |
MISP |
cti-transmute |
2026-08-11T09:07:45.287405Z | 2026-08-11T09:07:52.571197Z |
| GCVE-1-2026-20135 |
8.7 (4.0)
|
cti-transmute Unauthenticated SSRF via Hostnames Resol… |
MISP |
cti-transmute |
2026-08-11T09:01:14.732021Z | 2026-08-11T09:01:22.208859Z |
| GCVE-1-2026-20164 |
5.1 (4.0)
|
cti-transmute Stored XSS via Crafted Tag Icon on Admin… |
MISP |
cti-transmute |
2026-08-11T08:45:48.745486Z | 2026-08-11T08:45:57.455093Z |
| GCVE-1-2026-20074 |
5.1 (4.0)
|
cti-transmute Saved Graph Configuration Allows Stored … |
MISP |
cti-transmute |
2026-08-11T08:31:00.273544Z | 2026-08-11T08:31:07.407580Z |
| GCVE-1-2026-20082 |
2.3 (4.0)
|
cti-transmute Remote MISP Event Browser Allows Cross-S… |
MISP |
cti-transmute |
2026-08-11T08:02:02.426126Z | 2026-08-11T08:06:56.092767Z |
| GCVE-1-2026-20160 |
5.3 (4.0)
|
cti-transmute Evaluation Report Exports Expose Private… |
MISP |
cti-transmute |
2026-08-11T07:17:00.000Z | 2026-08-11T07:38:30.259049Z |
| GCVE-1-2026-20179 |
5.3 (4.0)
|
cti-transmute Sunburst and Treemap Tooltips Allow Cros… |
MISP |
cti-transmute |
2026-08-11T07:37:55.416651Z | 2026-08-11T07:38:02.347658Z |
| GCVE-1-2026-20170 |
5.3 (4.0)
|
cti-transmute Missing Authorization Allows Reactions t… |
MISP |
cti-transmute |
2026-08-11T07:31:40.352153Z | 2026-08-11T07:31:47.609188Z |
| GCVE-1-2026-20039 |
6.9 (4.0)
|
Webhook SSRF guard bypassed by IPv6 transition address… |
vulnerability-lookup |
vulnerability-lookup |
2026-08-10T14:32:00.000Z | 2026-08-10T14:33:01.108239Z |
| GCVE-1-2026-20037 |
5.3 (4.0)
|
cti-transmute Following List Exposes User Email Addres… |
MISP |
cti-transmute |
2026-08-10T14:30:48.103367Z | 2026-08-10T14:31:48.310080Z |
| GCVE-1-2026-20090 |
6.9 (4.0)
|
cti-transmute Conversion History Authorization Bypass … |
misp |
cti-transmute |
2026-08-10T14:13:00.000Z | 2026-08-10T14:18:44.108563Z |
| GCVE-1-2026-20062 |
5.1 (4.0)
|
Stored Cross-Site Scripting in CTI-Transmute Conversio… |
misp |
cti-transmute |
2026-08-10T13:56:43.640969Z | 2026-08-10T13:58:29.731288Z |
| GCVE-1-2026-20109 |
5.1 (4.0)
|
Unauthenticated Stored Vue Template Injection Leads to… |
misp |
cti-transmute |
2026-08-06T20:29:00.000Z | 2026-08-06T22:00:35.563165Z |
| GCVE-1-2026-20130 |
6.9 (4.0)
|
Stored Cross-Site Scripting in Chat and Forum Translat… |
ail-project |
ail-framework |
2026-08-06T17:04:00.000Z | 2026-08-06T17:08:41.601230Z |
| GCVE-1-2026-20168 |
6.9 (4.0)
|
Stored Cross-Site Scripting in AIL Framework Domain Sc… |
ail-project |
ail-framework |
2026-08-06T16:56:47.114370Z | 2026-08-06T16:57:13.164252Z |
| GCVE-1-2026-20147 |
8.2 (4.0)
|
Authenticated Reflected Cross-Site Scripting in Tag Er… |
ail-project |
ail-framework |
2026-08-06T16:47:00.000Z | 2026-08-06T16:48:38.055308Z |
| GCVE-1-2026-20111 |
8.8 (4.0)
|
Cross-Site Request Forgery in the Administrative User … |
misp |
cti-transmute |
2026-08-03T09:42:38.748873Z | 2026-08-03T09:42:53.991511Z |
| GCVE-1-2026-20064 |
8.7 (4.0)
|
Unauthenticated Denial of Service via Unbounded Activi… |
misp |
cti-transmute |
2026-08-03T09:20:06.797951Z | 2026-08-03T09:20:23.777077Z |
| GCVE-1-2026-20038 |
8.8 (4.0)
|
Server-Side Request Forgery and Local File Disclosure … |
misp |
cti-transmute |
2026-08-03T09:12:35.857068Z | 2026-08-03T09:12:51.486751Z |
| GCVE-1-2026-20061 |
6.9 (4.0)
|
Stored Cross-Site Scripting via Vue Template Injection… |
flowintel |
flowintel |
2026-08-03T08:45:39.378583Z | 2026-08-03T08:46:51.525092Z |
| GCVE-1-2026-20146 |
7.8 (4.0)
|
Open Redirect in MISP Installer-Generated Apache Confi… |
misp |
misp |
2026-07-28T14:30:07.486165Z | 2026-07-28T14:30:18.162845Z |
| GCVE-1-2026-20149 |
9.2 (4.0)
|
DOM-Based Cross-Site Scripting via Unsafe String and S… |
pivotick |
pivotick |
2026-07-28T13:53:22.770579Z | 2026-07-28T13:53:32.396211Z |
| GCVE-1-2026-20077 |
5.1 (4.0)
|
Pivotick Unvalidated Node Image URLs Allow Unintended … |
pivotick |
pivotick |
2026-07-28T13:31:59.211427Z | 2026-07-28T13:32:09.051521Z |
| GCVE-1-2026-20118 |
5.1 (4.0)
|
Pivotick Prototype-Key Collision in Tree Layout and Cy… |
pivotick |
pivotick |
2026-07-28T13:19:44.678787Z | 2026-07-28T13:20:04.318008Z |