Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-48550 |
5.1 (4.0)
6.1 (3.1)
|
Nagios Core / XI cmd.cgi Reflected XSS via NagFormId P… |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-12T16:30:02.409Z | 2026-08-12T16:34:44.003Z |
| CVE-2026-48552 |
5.1 (4.0)
5.4 (3.1)
|
Nagios Core / XI DOM-based XSS via jsonquery.js |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-12T16:34:33.654Z | 2026-08-12T16:34:33.654Z |
| CVE-2026-48551 |
6.1 (4.0)
7.4 (3.1)
|
Nagios Core / XI CSRF Protection Bypass via Double-Sub… |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-12T16:32:16.601Z | 2026-08-12T16:32:16.601Z |
| CVE-2026-73297 |
6.9 (4.0)
|
Microsoft UFO: IPv6 transition address bypass of SSRF … |
microsoft |
UFO |
2026-08-12T16:31:35.224Z | 2026-08-12T16:31:35.224Z |
| CVE-2026-73296 |
9.4 (3.1)
|
Microsoft UFO: Unauthenticated Mobile MCP access allow… |
microsoft |
UFO |
2026-08-12T16:29:03.154Z | 2026-08-12T16:29:03.154Z |
| CVE-2026-68076 |
N/A
|
Apache Airflow: Connections test API: team-scope guard… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:23:22.930Z | 2026-08-12T16:26:02.064Z |
| CVE-2026-59244 |
N/A
|
Apache Airflow: Secrets masker: `var.json` Variable va… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:43:17.373Z | 2026-08-12T16:25:56.895Z |
| CVE-2026-58076 |
N/A
|
Apache Airflow: Unguarded import_string() of airflow_e… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:40:59.934Z | 2026-08-12T16:25:52.119Z |
| CVE-2026-54183 |
N/A
|
Apache Airflow: Airflow Variables were not masked in t… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:34:22.966Z | 2026-08-12T16:25:46.798Z |
| CVE-2026-59242 |
N/A
|
Apache Airflow: Arbitrary airflow.* class instantiatio… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:35:00.763Z | 2026-08-12T16:25:40.183Z |
| CVE-2026-67260 |
7.3 (3.1)
|
Apache Airflow: DAG-author remote code execution on th… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:33:02.858Z | 2026-08-12T16:25:35.884Z |
| CVE-2026-18499 |
8.1 (3.1)
|
IBM WebSphere Application Server Liberty is affected b… |
IBM |
WebSphere Application Server - Liberty |
2026-08-12T16:25:07.006Z | 2026-08-12T16:25:07.006Z |
| CVE-2026-67587 |
N/A
|
Apache Airflow: DAG-author remote code execution on th… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:32:10.565Z | 2026-08-12T16:25:04.749Z |
| CVE-2026-65017 |
N/A
|
Apache Airflow: Config API: team-scoped Celery broker … |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:31:26.092Z | 2026-08-12T16:24:57.599Z |
| CVE-2026-68968 |
N/A
|
Apache Airflow: Authorization bypass in the Backfill A… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:27:46.731Z | 2026-08-12T16:24:50.338Z |
| CVE-2026-68969 |
N/A
|
Apache Airflow: Bulk Variable and Connection endpoints… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:26:40.095Z | 2026-08-12T16:24:44.679Z |
| CVE-2026-68970 |
N/A
|
Apache Airflow: Values of a list-shaped Variable are n… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:24:53.217Z | 2026-08-12T16:24:39.638Z |
| CVE-2026-68971 |
N/A
|
Apache Airflow: Cross-team authorization bypass in the… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:24:10.679Z | 2026-08-12T16:24:18.907Z |
| CVE-2026-68868 |
N/A
|
Apache Airflow Google provider: google Secret Manager … |
Apache Software Foundation |
Apache Airflow Google provider |
2026-08-12T10:27:56.154Z | 2026-08-12T16:23:38.681Z |
| CVE-2024-3727 |
8.3 (3.1)
|
Containers/image: digest type does not guarantee valid type |
|
|
2024-05-09T14:57:21.327Z | 2026-08-12T16:23:23.482Z |
| CVE-2026-73295 |
5.4 (3.1)
|
Material for MkDocs: DOM XSS in search suggestions via… |
squidfunk |
mkdocs-material |
2026-08-12T16:15:22.470Z | 2026-08-12T16:15:22.470Z |
| CVE-2026-66376 |
4.2 (3.1)
|
Deleted users may temporarily retain access to JFrog A… |
jfrog |
artifactory |
2026-08-12T14:55:59.321Z | 2026-08-12T16:15:13.664Z |
| CVE-2026-68753 |
5.3 (3.1)
|
Anonymous users may access restricted Artifactory cont… |
jfrog |
artifactory |
2026-08-12T14:57:38.891Z | 2026-08-12T16:12:50.624Z |
| CVE-2026-68754 |
6.5 (3.1)
|
Publishers without delete permission can overwrite doc… |
jfrog |
artifactory |
2026-08-12T14:58:43.619Z | 2026-08-12T16:12:23.255Z |
| CVE-2026-68755 |
4.3 (3.1)
|
Bundle writers may alter trusted release information i… |
jfrog |
artifactory |
2026-08-12T15:00:06.491Z | 2026-08-12T16:11:43.313Z |
| CVE-2026-65940 |
6.8 (3.1)
|
WhatsUp Gold versions prior to 26.0.2 excessive file s… |
Progress Software Corporation |
WhatsUp Gold |
2026-08-12T15:23:27.963Z | 2026-08-12T16:11:10.232Z |
| CVE-2026-65941 |
8.8 (3.1)
|
WhatsUp Gold versions prior to 26.0.2 contain an unaut… |
Progress Software Corporation |
WhatsUp Gold |
2026-08-12T15:23:54.118Z | 2026-08-12T16:10:40.937Z |
| CVE-2026-15249 |
5.4 (3.1)
|
Patterns Kit <= 1.0.3 - Contributor+ Stored XSS via Yo… |
Unknown |
Patterns Kit |
2026-08-12T06:00:14.294Z | 2026-08-12T16:10:07.654Z |
| CVE-2026-16066 |
5.4 (3.1)
|
Welcart e-Commerce < 2.11.34 - Author+ Stored XSS via … |
Unknown |
Welcart e-Commerce |
2026-08-12T06:00:14.817Z | 2026-08-12T16:09:32.179Z |
| CVE-2026-16253 |
7.5 (3.1)
|
Total Upkeep (BoldGrid Backup) < 1.17.3 - Unauthentica… |
Unknown |
Total Upkeep |
2026-08-12T06:00:14.995Z | 2026-08-12T16:08:48.321Z |