Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4v8f-3c7h-9xrw |
8.5 (4.0)
|
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vu… | 2026-08-01T00:30:56Z | 2026-08-01T00:30:56Z |
| ghsa-xw47-r6m7-qrhr |
|
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-xgpf-25jc-xvgf |
9.6 (3.1)
|
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 al… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-w7m2-6chv-wg69 |
7.8 (3.1)
|
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary cod… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-m6mj-vrrh-w93x |
8.8 (3.1)
|
Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker wh… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-jhhh-39pj-vgq6 |
|
An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management m… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-j56f-72j5-v78h |
|
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-hmjv-q65w-xfr7 |
5.4 (3.1)
|
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-h8ww-33xv-qc27 |
6.5 (3.1)
|
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote atta… | 2026-07-30T03:31:12Z | 2026-08-01T00:30:55Z |
| ghsa-7wx4-25xq-m4j2 |
6.5 (3.1)
|
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-6p72-9j26-4rmx |
9.8 (3.1)
9.3 (4.0)
|
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node th… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-6c5f-9m5w-cq8h |
6.5 (3.1)
|
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allo… | 2026-07-30T03:31:13Z | 2026-08-01T00:30:55Z |
| ghsa-4pg7-2q5x-32w4 |
|
An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows a… | 2026-08-01T00:30:55Z | 2026-08-01T00:30:55Z |
| ghsa-j6g9-f586-p93v |
8.0 (3.1)
8.5 (4.0)
|
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows an adjacent … | 2026-02-02T18:31:33Z | 2026-08-01T00:30:54Z |
| ghsa-vmf9-6pcv-xr87 |
5.3 (3.1)
|
Withdrawn Advisory: Username enumeration attack in goauthentik | 2023-08-29T23:34:51Z | 2026-07-31T22:35:59Z |
| ghsa-vvp7-h4fj-m28w |
7.7 (3.1)
|
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to rea… | 2026-07-31T22:35:05Z | 2026-07-31T22:35:05Z |
| ghsa-g65v-27r3-5p6m |
6.9 (4.0)
|
guard-livereload has a directory traversal vulnerability | 2026-07-31T22:33:01Z | 2026-07-31T22:33:01Z |
| ghsa-c5px-58j2-7fqp |
6.2 (3.1)
|
gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode | 2026-07-31T22:31:20Z | 2026-07-31T22:31:20Z |
| ghsa-jhh7-832h-f8hv |
6.9 (4.0)
|
WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + … | 2026-07-31T22:24:29Z | 2026-07-31T22:24:29Z |
| ghsa-pjp7-q6wp-97qx |
0.0 (3.1)
4.8 (4.0)
|
core-geonetwork has an Open Redirect Bypass | 2026-07-31T22:16:34Z | 2026-07-31T22:16:34Z |
| ghsa-m49c-g9wr-hv6v |
9.8 (3.1)
|
jinjava has Sandbox Bypass via JavaType-Based Deserialization | 2025-09-17T19:56:21Z | 2026-07-31T22:15:57Z |
| ghsa-993g-76c3-p5m4 |
4.2 (3.1)
|
PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://… | 2026-06-15T19:28:41Z | 2026-07-31T22:13:14Z |
| ghsa-fhv5-28vv-h8m8 |
3.7 (3.1)
|
PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) | 2026-06-15T17:28:46Z | 2026-07-31T22:13:02Z |
| ghsa-wg4g-wm44-ch5j |
6.3 (4.0)
|
Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExch… | 2026-07-31T22:06:33Z | 2026-07-31T22:06:33Z |
| ghsa-34rh-wp3j-6cxc |
5.3 (3.1)
|
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADD… | 2026-07-31T22:03:42Z | 2026-07-31T22:03:42Z |
| ghsa-89gg-p5r5-q6r4 |
7.6 (3.1)
|
MONAI: Unsafe functions lead to pickle deserialization rce | 2026-04-07T20:17:21Z | 2026-07-31T22:01:45Z |
| ghsa-wqqc-jjcq-vfxm |
3.1 (3.1)
|
sigstore-go fails to check signature timestamps against a signing key's validity period | 2026-07-31T21:58:39Z | 2026-07-31T21:58:39Z |
| ghsa-m4p7-r5rc-7g4j |
7.5 (3.1)
|
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs | 2026-07-21T19:10:11Z | 2026-07-31T21:55:42Z |
| ghsa-wf43-fpp3-cf65 |
8.7 (3.1)
|
@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into… | 2026-07-31T21:53:56Z | 2026-07-31T21:53:56Z |
| ghsa-34pj-2622-jvxq |
3.7 (3.1)
|
@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header | 2026-07-31T21:51:41Z | 2026-07-31T21:51:41Z |