Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20252 |
6.3 (4.0)
|
Vulnerability-Lookup - Race Condition in Account Recov… |
vulnerability-lookup |
vulnerability-lookup |
2026-09-27T14:47:33.302690Z | 2026-09-27T14:47:50.875076Z |
| GCVE-1-2026-20183 |
6.3 (4.0)
|
Ail Framework Crawler: Missing Cookiejar Authorization… |
ail project |
ail framework |
2026-09-25T13:35:00.000Z | 2026-09-25T13:55:39.228706Z |
| GCVE-1-2026-20279 |
8.5 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Use… |
ail project |
ail framework |
2026-09-25T13:29:00.000Z | 2026-09-25T13:55:11.866831Z |
| GCVE-1-2026-20269 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Tag… |
ail project |
ail framework |
2026-09-25T13:21:00.000Z | 2026-09-25T13:54:48.431524Z |
| GCVE-1-2026-20239 |
8.5 (4.0)
|
Stored XSS in AIL Framework extracted-match popovers v… |
ail project |
ail framework |
2026-09-25T13:13:00.000Z | 2026-09-25T13:54:03.667825Z |
| GCVE-1-2026-20276 |
6.9 (4.0)
|
AIL Framework Onion Module: Non-Onion URL Accepted as … |
ail project |
ail framework |
2026-09-25T13:40:00.000Z | 2026-09-25T13:53:04.756019Z |
| GCVE-1-2026-20292 |
6.3 (4.0)
|
Stored Cross-Site Scripting (XSS) via Crawler Capture … |
ail project |
ail framework |
2026-09-25T13:49:00.000Z | 2026-09-25T13:52:14.626493Z |
| GCVE-1-2026-20108 |
8.4 (4.0)
|
Broken authorization in Akia keyless entry lets an aut… |
akia |
akia |
2026-09-25T09:44:00.000Z | 2026-09-25T10:07:22.429982Z |
| GCVE-1-2026-20190 |
6.3 (4.0)
|
misp-modules: Shell Command Injection in MISP cisco_fi… |
misp |
misp-modules |
2026-09-25T08:02:00.000Z | 2026-09-25T09:49:45.859656Z |
| GCVE-1-2026-20263 |
7.7 (4.0)
|
MISP: PHP phar stream wrapper enables deserialization … |
MISP |
MISP |
2026-09-22T15:08:51.542843Z | 2026-09-22T15:09:05.089365Z |
| GCVE-1-2026-20240 |
5.3 (4.0)
|
MISP ACLComponent: Typo in previewEventAttributes ACL … |
MISP |
MISP |
2026-09-22T14:59:06.674611Z | 2026-09-22T14:59:19.861474Z |
| GCVE-1-2026-20024 |
6.9 (4.0)
|
MISP: Disabled-user check ineffective in pre-authentic… |
MISP |
MISP |
2026-09-22T14:53:44.090577Z | 2026-09-22T14:53:53.418288Z |
| GCVE-1-2026-20270 |
5.1 (4.0)
|
MISP OrganisationsController File Existence and Image-… |
MISP |
MISP |
2026-09-22T14:49:29.214426Z | 2026-09-22T14:49:37.760620Z |
| GCVE-1-2026-20065 |
5.1 (4.0)
|
MISP Path Traversal via Organization Name in Org-Stati… |
MISP |
MISP |
2026-09-22T14:44:11.001111Z | 2026-09-22T14:44:19.846758Z |
| GCVE-1-2026-20266 |
5.3 (4.0)
|
MISP Path Traversal in OrgImgHelper findOrgImage via C… |
MISP |
MISP |
2026-09-22T14:36:25.776959Z | 2026-09-22T14:36:33.546261Z |
| GCVE-1-2026-20182 |
5.3 (4.0)
|
MISP: Insufficient Authorization Allows Sharing Group … |
MISP |
MISP |
2026-09-22T14:31:15.792405Z | 2026-09-22T14:31:23.423452Z |
| GCVE-1-2026-20218 |
5.3 (4.0)
|
MISP Information Disclosure via Forged Upload Path |
MISP |
MISP |
2026-09-22T14:22:17.582050Z | 2026-09-22T14:22:26.802074Z |
| GCVE-1-2026-20095 |
5.3 (4.0)
|
MISP Missing Authorization on replaceSuggestionInRepor… |
MISP |
MISP |
2026-09-22T14:13:09.458019Z | 2026-09-22T14:13:21.739434Z |
| GCVE-1-2026-20285 |
5.3 (4.0)
|
MISP Overmind Event View Discloses Report Content Bypa… |
MISP |
MISP |
2026-09-22T14:06:46.948190Z | 2026-09-22T14:06:57.790167Z |
| GCVE-1-2026-20214 |
4.8 (4.0)
|
MISP Stored Cross-Site Scripting via Unescaped Organiz… |
MISP |
MISP |
2026-09-22T13:56:41.339200Z | 2026-09-22T13:56:48.987466Z |
| GCVE-1-2026-20205 |
6.9 (4.0)
|
MISP Unauthenticated Blind SSRF via XML Body Processing |
MISP |
MISP |
2026-09-22T13:50:38.640565Z | 2026-09-22T13:50:46.317940Z |
| GCVE-1-2026-20127 |
5.3 (4.0)
|
MISP EventsController queryEnrichment allows querying … |
MISP |
MISP |
2026-09-22T13:44:24.306583Z | 2026-09-22T13:44:31.694767Z |
| GCVE-1-2026-20271 |
5.3 (4.0)
|
MISP Collections: Missing Authorization Check for Shar… |
MISP |
MISP |
2026-09-22T13:20:11.113764Z | 2026-09-22T13:20:21.459826Z |
| GCVE-1-2026-20100 |
6.9 (4.0)
|
MISP Installer Log and FIFO Created World-Readable, Ex… |
MISP |
MISP |
2026-09-22T13:11:21.409005Z | 2026-09-22T13:11:38.072089Z |
| GCVE-1-2026-20129 |
5.1 (4.0)
|
MISP Reflected Cross-Site Scripting in Event Export Co… |
MISP |
MISP |
2026-09-22T13:01:34.828652Z | 2026-09-22T13:01:43.034034Z |
| GCVE-1-2026-20161 |
5.1 (4.0)
|
MISP Reflected Cross-Site Scripting in Attribute Histo… |
MISP |
MISP |
2026-09-22T12:54:36.084083Z | 2026-09-22T12:54:44.014502Z |
| GCVE-1-2026-20234 |
4.8 (4.0)
|
MISP Reflected XSS via Unvalidated Object Type in Anal… |
MISP |
MISP |
2026-09-22T12:40:00.000Z | 2026-09-22T12:41:23.369639Z |
| GCVE-1-2026-20261 |
6.9 (4.0)
|
MISP CSRF vulnerability in workflow moduleStatelessExe… |
MISP |
MISP |
2026-09-22T12:31:11.850218Z | 2026-09-22T12:31:20.402691Z |
| GCVE-1-2026-20153 |
8.7 (4.0)
|
MISP Background Job Argument Injection via Console Pat… |
misp |
misp |
2026-09-17T16:23:00.000Z | 2026-09-22T07:42:03.681655Z |
| GCVE-1-2026-20206 |
8.5 (4.0)
|
MISP Overmind: Stored Cross-Site Scripting via Unescap… |
misp |
misp |
2026-09-17T16:29:00.000Z | 2026-09-22T07:36:39.504987Z |