Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 87 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-python-2026-115557 | Distrust compromised intermediate certificates in ssl module | 2026-10-30T15:37:30.494Z | 2026-10-30T15:59:08.834Z |
| bit-python-2026-114583 | tar filter allows writing outside destination via empty-named symlink | 2026-10-29T12:19:39.543Z | 2026-10-30T15:59:08.834Z |
| bit-parse-2026-116165 | Parse Server 9.0.0 before 9.10.4 Unauthenticated Class Schema Deletion on MongoDB | 2026-10-30T15:35:46.756Z | 2026-10-30T15:59:08.834Z |
| bit-parse-2026-116164 | Parse Server 9.0.0 before 9.10.4 Reserved Field Name Injection via Object Writes | 2026-10-30T15:35:45.645Z | 2026-10-30T15:59:08.834Z |
| bit-parse-2026-116163 | Parse Server 9.0.0 before 9.10.5 Authentication Bypass via AuthAdapter Subclasses | 2026-10-30T15:35:44.563Z | 2026-10-30T15:59:08.834Z |
| bit-parse-2026-116162 | Parse Server 9.0.0 before 9.10.5 Privilege Escalation via SMS MFA Login | 2026-10-30T15:35:43.527Z | 2026-10-30T15:59:08.834Z |
| bit-parse-2026-116161 | Parse Server 9.0.0 before 9.10.5 LiveQuery Information Disclosure via $or Subscriptions | 2026-10-30T15:35:42.275Z | 2026-10-30T15:59:08.834Z |
| bit-libpython-2026-115557 | Distrust compromised intermediate certificates in ssl module | 2026-10-30T15:32:26.122Z | 2026-10-30T15:59:08.834Z |
| bit-libpython-2026-114583 | tar filter allows writing outside destination via empty-named symlink | 2026-10-29T12:12:45.267Z | 2026-10-30T15:59:08.834Z |
| bit-solr-2026-44825 | Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users | 2026-06-05T05:53:30.550Z | 2026-10-30T12:16:15.607Z |
| bit-tomcat-2026-93446 | Apache Tomcat: Possible TLS 1.3 connection failures | 2026-10-29T09:02:42.656Z | 2026-10-30T09:15:51.334Z |
| bit-tomcat-2026-88041 | Apache Tomcat: HTTP/2 trailer header cross-contamination | 2026-10-29T09:02:41.296Z | 2026-10-30T09:15:51.334Z |
| bit-tomcat-2026-80353 | Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector | 2026-10-29T09:02:36.268Z | 2026-10-30T09:15:51.334Z |
| bit-tomcat-2026-74049 | Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) | 2026-10-29T09:02:24.170Z | 2026-10-30T09:15:51.334Z |
| bit-tomcat-2026-74048 | Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up | 2026-10-29T09:02:22.765Z | 2026-10-30T09:15:51.334Z |
| bit-seaweedfs-2026-100413 | SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments | 2026-10-21T08:59:19.720Z | 2026-10-30T09:15:51.334Z |
| bit-rclone-2026-116190 | rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect | 2026-10-29T08:58:34.800Z | 2026-10-30T09:15:51.334Z |
| bit-rclone-2026-116189 | rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS | 2026-10-29T08:58:33.614Z | 2026-10-30T09:15:51.334Z |
| bit-rclone-2026-116188 | rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow | 2026-10-29T08:58:32.428Z | 2026-10-30T09:15:51.334Z |
| bit-rclone-2026-116187 | Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads | 2026-10-29T08:58:31.215Z | 2026-10-30T09:15:51.334Z |
| bit-php-2026-109618 | RCE via OOM corruption | 2026-10-22T08:08:19.155Z | 2026-10-30T09:15:51.334Z |
| bit-libphp-2026-109618 | RCE via OOM corruption | 2026-10-22T08:04:26.105Z | 2026-10-30T09:15:51.334Z |
| bit-helm-2026-63308 | Helm Files.Lines Denial of Service via Empty Chart Files | 2026-07-31T08:42:54.137Z | 2026-10-30T09:15:51.334Z |
| bit-gitlab-2026-97229 | Integer Overflow or Wraparound in GitLab | 2026-10-16T09:05:58.250Z | 2026-10-30T09:15:51.334Z |
| bit-gitlab-2026-16255 | Incorrect Authorization in GitLab | 2026-10-29T09:11:24.348Z | 2026-10-30T09:15:51.334Z |
| bit-gitlab-2026-14288 | Use of Incorrectly-Resolved Name or Reference in GitLab | 2026-10-29T09:10:55.621Z | 2026-10-30T09:15:51.334Z |
| bit-gitlab-2026-112378 | Use of Less Trusted Source in GitLab | 2026-10-29T09:10:18.643Z | 2026-10-30T09:15:51.334Z |
| bit-gitlab-2026-103515 | Incorrect Authorization in GitLab | 2026-10-29T09:09:49.036Z | 2026-10-30T09:15:51.334Z |
| bit-sqlite-2026-11822 | SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek | 2026-06-12T08:51:44.016Z | 2026-10-30T06:15:07.538Z |
| bit-python-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | 2026-09-17T11:54:23.295Z | 2026-10-29T12:40:48.706Z |