Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-44cp-6fgm-vq6g |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16T00:32:00Z | 2026-10-16T00:32:00Z |
| ghsa-3hh9-228g-qmjp |
4.8 (3.1)
5.9 (4.0)
|
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, … | 2026-10-16T00:32:00Z | 2026-10-16T00:32:00Z |
| ghsa-2jrh-7mc6-2892 |
5.3 (3.1)
6.0 (4.0)
|
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the C… | 2026-10-16T00:32:00Z | 2026-10-16T00:32:00Z |
| ghsa-qg24-w69h-hf3v |
7.1 (3.1)
7.1 (4.0)
|
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /… | 2026-10-16T00:31:59Z | 2026-10-16T00:31:59Z |
| ghsa-j6jm-jc5p-v7pp |
6.4 (3.1)
6.1 (4.0)
|
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono AP… | 2026-10-16T00:31:59Z | 2026-10-16T00:31:59Z |
| ghsa-h86v-9fhw-gvch |
6.5 (3.1)
6.9 (4.0)
|
BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthent… | 2026-10-16T00:31:59Z | 2026-10-16T00:31:59Z |
| ghsa-ghj7-f59x-5hw6 |
7.2 (3.1)
8.6 (4.0)
|
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows departme… | 2026-10-16T00:31:59Z | 2026-10-16T00:31:59Z |
| ghsa-c99c-gh3j-2mp4 |
6.5 (3.1)
7.1 (4.0)
|
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentCon… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:59Z |
| ghsa-654q-53gj-v4xg |
6.0 (3.1)
7.0 (4.0)
|
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-supe… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:59Z |
| ghsa-x2wf-9f7g-pjxv |
7.4 (3.1)
9.1 (4.0)
|
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, … | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-mq9g-xvh8-gxg3 |
6.3 (3.1)
5.3 (4.0)
|
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authen… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-9w73-g77r-h565 |
5.4 (3.1)
5.3 (4.0)
|
SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-9mf3-4252-g5rr |
7.1 (3.1)
7.1 (4.0)
|
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows au… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-988q-6ph7-3qfp |
4.3 (3.1)
5.3 (4.0)
|
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticat… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-73p2-fh3g-2wf2 |
3.1 (3.1)
2.3 (4.0)
|
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated mem… | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-37gw-p3c6-34pr |
6.5 (3.1)
7.1 (4.0)
|
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows … | 2026-10-16T00:31:58Z | 2026-10-16T00:31:58Z |
| ghsa-xxc7-55p3-gxvw |
5.0 (3.1)
2.3 (4.0)
|
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer gro… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-xm42-mhff-286m |
4.3 (3.1)
5.3 (4.0)
|
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-v43m-w632-85qf |
4.2 (3.1)
2.3 (4.0)
|
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestCo… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-qf7c-pg8v-q3rx |
8.8 (3.1)
8.7 (4.0)
|
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-j8xc-5qc2-7pc3 |
3.7 (3.1)
6.3 (4.0)
|
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymou… | 2026-10-16T00:31:56Z | 2026-10-16T00:31:57Z |
| ghsa-f952-gxq8-q296 |
5.4 (3.1)
5.3 (4.0)
|
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that … | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-9gwv-266m-5wg3 |
4.3 (3.1)
5.3 (4.0)
|
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that all… | 2026-10-16T00:31:56Z | 2026-10-16T00:31:57Z |
| ghsa-8xxp-5p6v-mjx3 |
5.9 (3.1)
8.2 (4.0)
|
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-5vm9-2pq9-4q7r |
5.4 (3.1)
5.3 (4.0)
|
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php … | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-566j-v842-c9mx |
4.3 (3.1)
5.3 (4.0)
|
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticat… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-4pw4-44qq-2vmv |
5.3 (3.1)
6.9 (4.0)
|
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource… | 2026-10-16T00:31:57Z | 2026-10-16T00:31:57Z |
| ghsa-qvc9-rg5c-3453 |
5.3 (3.1)
6.9 (4.0)
|
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated… | 2026-10-16T00:31:56Z | 2026-10-16T00:31:56Z |
| ghsa-g3vp-47q6-cfx3 |
5.3 (3.1)
6.9 (4.0)
|
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the … | 2026-10-16T00:31:56Z | 2026-10-16T00:31:56Z |
| ghsa-8775-m6vh-qqqm |
9.8 (3.1)
9.3 (4.0)
|
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow u… | 2026-10-16T00:31:56Z | 2026-10-16T00:31:56Z |