Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mongodb-2026-82076 | Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server | 2026-09-15T15:39:27.235Z | 2026-09-15T16:02:07.986Z |
| bit-rclone-2026-88018 | rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass | 2026-09-15T08:49:34.908Z | 2026-09-15T09:01:14.338Z |
| bit-rclone-2026-88017 | rclone: FTP cross-session auth-proxy backend confusion | 2026-09-15T08:49:34.130Z | 2026-09-15T09:01:14.338Z |
| bit-rclone-2026-88016 | rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination | 2026-09-15T08:49:33.247Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-42499 | Quadratic string concatenation in consumePhrase in net/mail | 2026-05-11T05:44:41.457Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-39820 | Quadratic string concatentation in consumeComment in net/mail | 2026-05-11T05:44:31.985Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-33814 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | 2026-05-11T05:44:26.716Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-33811 | Crash when handling long CNAME response in net | 2026-05-11T05:44:24.861Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-33810 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | 2026-04-13T05:43:50.259Z | 2026-09-15T09:01:14.338Z |
| bit-golang-2026-27137 | Incorrect enforcement of email constraints in crypto/x509 | 2026-03-10T08:44:11.145Z | 2026-09-15T09:01:14.338Z |
| bit-gitlab-2026-85706 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | 2026-09-15T08:59:48.164Z | 2026-09-15T09:01:14.338Z |
| bit-apache-2026-44185 | Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` | 2026-06-10T08:39:18.715Z | 2026-09-15T09:01:14.338Z |
| bit-apache-2026-42536 | Apache HTTP Server: mod_xml2enc heap overflow | 2026-06-10T08:39:14.858Z | 2026-09-15T09:01:14.338Z |
| bit-apache-2026-34355 | Apache HTTP Server: mod_proxy_html buffer overflow | 2026-06-10T08:39:11.068Z | 2026-09-15T09:01:14.338Z |
| bit-apache-2026-28780 | Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() | 2026-05-07T08:38:43.651Z | 2026-09-15T09:01:14.338Z |
| bit-keycloak-2026-9800 | Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison | 2026-08-25T11:42:52.486Z | 2026-09-14T08:47:32.703Z |
| bit-dotnet-2026-71328 | .NET and Visual Studio Remote Code Execution Vulnerability | 2026-09-14T08:19:25.641Z | 2026-09-14T08:47:32.703Z |
| bit-python-2026-15310 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits | 2026-09-11T05:56:22.537Z | 2026-09-12T09:08:08.194Z |
| bit-libpython-2026-15310 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits | 2026-09-11T05:48:20.534Z | 2026-09-12T09:08:08.194Z |
| bit-jenkins-2026-84652 | 2026-09-08T08:16:28.107Z | 2026-09-12T09:08:08.194Z | |
| bit-jenkins-2026-84651 | 2026-09-08T08:16:27.137Z | 2026-09-12T09:08:08.194Z | |
| bit-jenkins-2026-84650 | 2026-09-08T08:16:26.154Z | 2026-09-12T09:08:08.194Z | |
| bit-jenkins-2026-84648 | 2026-09-08T08:16:24.159Z | 2026-09-12T09:08:08.194Z | |
| bit-jenkins-2026-84646 | 2026-09-08T08:16:22.186Z | 2026-09-12T09:08:08.194Z | |
| bit-jenkins-2026-84645 | 2026-09-08T08:16:21.176Z | 2026-09-12T09:08:08.194Z | |
| bit-golang-2026-32283 | Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | 2026-04-13T05:43:44.464Z | 2026-09-12T09:08:08.194Z |
| bit-golang-2026-32280 | Unexpected work during chain building in crypto/x509 | 2026-04-13T05:43:38.849Z | 2026-09-12T09:08:08.194Z |
| bit-golang-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | 2026-06-05T05:44:57.398Z | 2026-09-12T09:08:08.194Z |
| bit-golang-2026-25679 | Incorrect parsing of IPv6 host literals in net/url | 2026-03-10T08:44:09.300Z | 2026-09-12T09:08:08.194Z |
| bit-golang-2025-61726 | Memory exhaustion in query parameter parsing in net/url | 2026-01-31T08:43:29.079Z | 2026-09-12T09:08:08.194Z |