Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-x8jx-mq2j-m3pv |
8.0 (3.1)
7.3 (4.0)
|
EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the deskt… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-q45w-888c-vpfr |
6.5 (3.1)
7.1 (4.0)
|
Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allo… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-p9qx-79pg-cv5g |
8.7 (3.1)
8.4 (4.0)
|
EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers … | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-m6wr-6wgx-82mm |
7.5 (3.1)
8.7 (4.0)
|
modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to … | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-f54m-g39v-qf2p |
7.5 (3.1)
7.7 (4.0)
|
Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allo… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-f4vq-cf7c-pvmv |
7.5 (3.1)
8.2 (4.0)
|
Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers wit… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-f2xf-xr5r-qf3x |
8.7 (3.1)
8.5 (4.0)
|
EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPan… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-489r-rjvf-hwg5 |
8.7 (3.1)
8.4 (4.0)
|
EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview… | 2026-10-12T21:31:59Z | 2026-10-12T21:31:59Z |
| ghsa-x4wc-gwq5-xx9p |
9.8 (3.1)
9.3 (4.0)
|
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-rpph-rh47-8p8m |
4.3 (3.1)
5.3 (4.0)
|
ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesh… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-qh63-x9g5-2gvq |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue … | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-q83v-h5qh-mxfc |
9.9 (3.1)
9.4 (4.0)
|
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of t… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-jg45-xvf3-93rf |
4.3 (3.1)
5.3 (4.0)
|
ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authentica… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-hjgr-c5c2-5h55 |
6.1 (3.1)
5.1 (4.0)
|
HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-gm9c-qwh2-h88c |
5.3 (3.1)
6.9 (4.0)
|
Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthentica… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-fr6x-p4fr-jfmv |
7.5 (3.1)
|
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to travers… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-f4hf-p864-9577 |
2.7 (3.1)
2.0 (4.0)
|
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function dd… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-cchp-25pr-r776 |
6.1 (3.1)
4.9 (4.0)
|
Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLo… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-8gmq-ghhj-j4rh |
4.3 (3.1)
5.3 (4.0)
|
SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrir… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-8863-378g-v6qf |
4.3 (3.1)
2.1 (4.0)
|
A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file d… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-32p2-gf6p-43qf |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vuln… | 2026-10-12T21:31:58Z | 2026-10-12T21:31:58Z |
| ghsa-xg8m-6cg7-cmf8 |
5.9 (3.1)
6.0 (4.0)
|
Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookie… | 2026-10-12T21:31:57Z | 2026-10-12T21:31:57Z |
| ghsa-qqfj-vf92-g76j |
8.2 (3.1)
8.8 (4.0)
|
fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modif… | 2026-10-12T21:31:57Z | 2026-10-12T21:31:57Z |
| ghsa-pcvv-rm69-6cv3 |
7.5 (3.1)
8.7 (4.0)
|
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remo… | 2026-10-12T21:31:57Z | 2026-10-12T21:31:57Z |
| ghsa-hh4m-hjw2-vfg7 |
8.1 (3.1)
9.2 (4.0)
|
easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attac… | 2026-10-12T21:31:57Z | 2026-10-12T21:31:57Z |
| ghsa-fpg7-639f-4v49 |
7.5 (3.1)
8.7 (4.0)
|
cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts dec… | 2026-10-12T21:31:57Z | 2026-10-12T21:31:57Z |
| ghsa-x9j3-m337-gm3x |
6.3 (3.1)
2.1 (4.0)
|
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This… | 2026-10-12T21:31:56Z | 2026-10-12T21:31:56Z |
| ghsa-wwvh-6vc7-p2p2 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability… | 2026-10-12T21:31:56Z | 2026-10-12T21:31:56Z |
| ghsa-mg5w-3rqq-96m8 |
7.4 (3.1)
9.1 (4.0)
|
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains … | 2026-10-12T21:31:56Z | 2026-10-12T21:31:56Z |
| ghsa-h7w7-mfj4-5gxw |
5.9 (3.1)
8.2 (4.0)
|
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains … | 2026-10-12T21:31:56Z | 2026-10-12T21:31:56Z |