Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-18585 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-bas… |
GL.iNet |
MT3000 |
2026-08-03T05:15:07.982Z | 2026-08-03T05:15:07.982Z |
| CVE-2026-59638 |
9.3 (4.0)
|
JSSE hostname verifier CN-fallback enabled by default … |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:57:31.904Z | 2026-08-03T05:06:18.285Z |
| CVE-2026-59639 |
8.7 (4.0)
|
CMS verifySignatures returns true for SignedData with … |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:56:24.394Z | 2026-08-03T05:05:39.619Z |
| CVE-2026-59640 |
8.7 (4.0)
|
OpenPGP CFB quick-check oracle active on symmetric/ses… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:55:19.062Z | 2026-08-03T05:04:51.696Z |
| CVE-2026-59641 |
8.7 (4.0)
|
S/MIME validator trusts signer-asserted signingTime fo… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:54:21.151Z | 2026-08-03T05:04:21.202Z |
| CVE-2026-59642 |
8.7 (4.0)
|
CMS AuthenticatedData content not bound to MAC when au… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:53:28.335Z | 2026-08-03T05:03:43.251Z |
| CVE-2026-59644 |
8.7 (4.0)
|
MLS hash-ratchet honours arbitrary 32-bit generation c… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:50:50.154Z | 2026-08-03T05:02:50.266Z |
| CVE-2026-59643 |
8.7 (4.0)
|
OpenPGP inline-signature policy failures silently ignored |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:51:55.504Z | 2026-08-03T05:02:16.399Z |
| CVE-2026-59645 |
8.7 (4.0)
|
OER parser recurses without depth limit on self-refere… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:49:41.143Z | 2026-08-03T05:00:24.183Z |
| CVE-2026-59646 |
8.7 (4.0)
|
DTLS handshake reassembler allocates buffer from unche… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:48:29.386Z | 2026-08-03T04:59:50.231Z |
| CVE-2026-59647 |
6.9 (4.0)
|
CRMF/CMP password-MAC honours unbounded iteration count |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:46:57.977Z | 2026-08-03T04:59:07.779Z |
| CVE-2026-59648 |
6.9 (4.0)
|
OpenPGP Argon2 S2K honours attacker-chosen memory and passes |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:45:34.967Z | 2026-08-03T04:58:11.776Z |
| CVE-2026-59649 |
8.7 (4.0)
|
OpenPGP user-attribute subpacket length bounded only b… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:44:24.300Z | 2026-08-03T04:57:25.149Z |
| CVE-2026-59650 |
9.3 (4.0)
|
MTI/A0 DH agreement exponentiates unvalidated peer value |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:42:46.157Z | 2026-08-03T04:56:24.664Z |
| CVE-2026-59651 |
7.1 (4.0)
|
BKS keystore accepts legacy version with 16-bit integr… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:41:23.578Z | 2026-08-03T04:55:29.469Z |
| CVE-2026-18584 |
5.3 (4.0)
5.4 (3.1)
5.4 (3.0)
|
GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA A… |
GL.iNet |
E5800 |
2026-08-03T04:45:07.095Z | 2026-08-03T04:45:07.095Z |
| CVE-2026-1784 |
8.8 (3.1)
|
Ose-cluster-ingress-operator: remote code execution th… |
Red Hat |
Red Hat OpenShift Container Platform 4.13 |
2026-06-02T07:22:26.461Z | 2026-08-03T04:28:47.824Z |
| CVE-2026-18583 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
mz-automation libiec61850 MMS Request mms_mapping.c ch… |
mz-automation |
libiec61850 |
2026-08-03T04:15:08.718Z | 2026-08-03T04:15:08.718Z |
| CVE-2026-6695 |
5.5 (3.1)
|
Gimp: gimp: remote code execution via crafted paa file |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-03T04:05:30.101Z | 2026-08-03T04:05:30.101Z |
| CVE-2026-6694 |
5.5 (3.1)
|
Gimp: gimp file-png plugin: denial of service via over… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-03T04:05:27.175Z | 2026-08-03T04:05:27.175Z |
| CVE-2026-58015 |
5.9 (3.1)
|
Glib: path traversal in glib/gio/gdbusauthmechanismsha… |
GNOME |
GLib |
2026-06-30T13:02:45.854Z | 2026-08-03T04:04:47.759Z |
| CVE-2026-58014 |
7.3 (3.1)
|
Glib: off-by-one error in glib/gkeyfile.c via "g_key_f… |
GNOME |
GLib |
2026-06-30T12:57:35.898Z | 2026-08-03T04:04:43.801Z |
| CVE-2026-58013 |
6.5 (3.1)
|
Glib: buffer over-read in glib/giochannel.c via "g_io_… |
GNOME |
GLib |
2026-06-30T12:57:34.902Z | 2026-08-03T04:04:39.654Z |
| CVE-2026-58012 |
6.5 (3.1)
|
Glib: buffer over-read in g_regex_replace() via glib/g… |
GNOME |
GLib |
2026-06-30T12:57:21.859Z | 2026-08-03T04:04:35.170Z |
| CVE-2026-58011 |
6.5 (3.1)
|
Glib: out-of-bounds read in glib/gdatetime.c:g_date_ti… |
GNOME |
GLib |
2026-06-30T12:57:15.173Z | 2026-08-03T04:04:30.227Z |
| CVE-2026-58010 |
6.5 (3.1)
|
Glib: buffer over-read in glib/gvariant-serialiser.c v… |
GNOME |
GLib |
2026-06-30T12:57:15.125Z | 2026-08-03T04:04:27.255Z |
| CVE-2025-14087 |
5.6 (3.1)
|
Glib: glib: buffer underflow in gvariant parser leads … |
GNOME |
glib |
2025-12-10T09:01:34.084Z | 2026-08-03T04:04:22.617Z |
| CVE-2026-59652 |
6.9 (4.0)
|
LDAP filter injection in legacy jdk1.4 LDAPStoreHelper |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T00:39:23.696Z | 2026-08-03T03:59:00.996Z |
| CVE-2026-58016 |
7.5 (3.1)
|
Glib: integer underflow in gio/gdbusintrospection.c vi… |
GNOME |
GLib |
2026-06-30T13:02:45.931Z | 2026-08-03T03:30:02.862Z |
| CVE-2026-13586 |
5.3 (4.0)
|
PKCS#12 MAC and bag-decryption KDF iteration-count bou… |
Legion of the Bouncy Castle Inc. |
BC-JAVA |
2026-08-03T02:58:00.982Z | 2026-08-03T02:58:00.982Z |