Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-q873-4w8p-m645 |
9.9 (3.1)
|
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because templa… | 2026-09-10T21:31:39Z | 2026-09-10T21:31:39Z |
| ghsa-cmhg-73x2-j8g7 |
6.7 (3.1)
|
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper au… | 2026-09-10T21:31:39Z | 2026-09-10T21:31:39Z |
| ghsa-9vhj-xhjf-hgp8 |
6.3 (3.1)
|
IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privileg… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:39Z |
| ghsa-w7vv-xhmp-9qcq |
9.1 (3.1)
9.3 (4.0)
|
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the C… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-v63q-2gxx-5p2w |
6.5 (3.1)
|
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sens… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-q3j6-99qm-jjmm |
4.8 (4.0)
|
An authenticated directory traversal vulnerability in file upload functionality has been identified… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-j9vg-5378-pr5p |
9.8 (3.1)
|
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute a… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-gpc6-x93j-gxgm |
7.8 (3.1)
8.5 (4.0)
|
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a loc… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-fcjx-6cv6-5wqj |
6.5 (3.1)
|
A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versi… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-8cvq-g9xh-jmpf |
|
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libx… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-83q6-79hr-m7rr |
5.3 (3.1)
|
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) t… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-5w42-gv46-j4rp |
|
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-4rwx-9hrf-jj43 |
5.3 (4.0)
|
A missing authentication vulnerability in the VPN configuration management has been identified in A… | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| ghsa-w44r-4p8w-x8cm |
7.8 (3.1)
8.4 (4.0)
|
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, dis… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-p349-w9qj-fpxx |
5.3 (3.1)
|
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sendi… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-hgfv-hm95-r744 |
4.7 (3.1)
|
The product's web portals allow external links to be opened in a new browser tab. In certain config… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-hcpr-9cm8-436x |
8.2 (3.1)
|
A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authe… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-gcq5-gj48-4qv3 |
7.1 (3.1)
8.4 (4.0)
|
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Ap… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-g72m-pv3v-gv9g |
7.8 (3.1)
8.5 (4.0)
|
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application … | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-fw6w-g4f4-936x |
6.5 (3.1)
|
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sendi… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-9r5j-37q2-cffw |
9.1 (3.1)
|
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confir… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-9hqx-g6f2-rj2p |
5.9 (3.1)
|
An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of Open… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-72w5-w82m-7hm9 |
5.3 (4.0)
|
Concrete CMS 9 through 9.5.2 did not validate an anti-CSRF token in the Boards custom slot dialog … | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-3877-6pj5-6gwv |
|
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/config… | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-32j6-362j-46jc |
7.3 (3.1)
|
The cstruct package before 6.3.0 for OCaml mishandles indexes. | 2026-09-10T21:31:36Z | 2026-09-10T21:31:36Z |
| ghsa-xgrc-pc59-m8cp |
5.9 (4.0)
|
Concrete CMS versions 8.3.0 through 9.5.2 are vulnerable to an authorization bypass in the Calendar… | 2026-09-10T21:31:35Z | 2026-09-10T21:31:35Z |
| ghsa-x33j-9628-wvwc |
8.3 (3.1)
6.1 (4.0)
|
Improper neutralization of special elements in data query logic in the GridFS component of the Mong… | 2026-09-10T21:31:35Z | 2026-09-10T21:31:35Z |
| ghsa-q5mw-fjrj-6qmh |
6.5 (3.1)
|
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that … | 2026-09-10T21:31:35Z | 2026-09-10T21:31:35Z |
| ghsa-mjp7-4wvg-9f57 |
8.3 (3.1)
|
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write pa… | 2026-09-10T21:31:35Z | 2026-09-10T21:31:35Z |
| ghsa-jgj9-g5rr-w8xg |
4.7 (3.1)
5.7 (4.0)
|
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an … | 2026-09-10T21:31:35Z | 2026-09-10T21:31:35Z |