Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-63387 |
7 (3.1)
|
Libevent: Off-by-one stack buffer overflow in dnsname_… |
libevent |
libevent |
2026-08-20T17:53:41.863Z | 2026-08-20T17:53:41.863Z |
| CVE-2026-63384 |
8.7 (4.0)
|
Libevent: `evtag_unmarshal_header()` decodes a wire `u… |
libevent |
libevent |
2026-08-20T17:53:08.417Z | 2026-08-20T17:53:08.417Z |
| CVE-2026-63380 |
5.7 (4.0)
|
Libevent: Null Pointer Dereference in `evws_new_session` |
libevent |
libevent |
2026-08-20T17:52:29.458Z | 2026-08-20T17:52:29.458Z |
| CVE-2026-42510 |
6.6 (3.1)
|
OpenStack Ironic before 35.0.1 allows ipmitool ex… |
OpenStack |
Ironic |
2026-04-28T04:53:10.789Z | 2026-08-20T17:51:50.989Z |
| CVE-2026-60821 |
9.8 (3.1)
|
Vulnerability in the PeopleSoft Enterprise People… |
Oracle Corporation |
PeopleSoft Enterprise PeopleTools |
2026-08-18T20:59:12.188Z | 2026-08-20T17:51:49.238Z |
| CVE-2026-63382 |
9.2 (4.0)
|
libevent evhttp: Multiple HTTP Parser Bugs Enable Requ… |
libevent |
libevent |
2026-08-20T17:51:15.156Z | 2026-08-20T17:51:15.156Z |
| CVE-2026-63381 |
5.8 (4.0)
|
Libevent: Dangling Pointer in `evbuffer_add_buffer_ref… |
libevent |
libevent |
2026-08-20T17:50:09.322Z | 2026-08-20T17:50:09.322Z |
| CVE-2026-60722 |
8.8 (3.1)
|
Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-08-18T20:59:01.415Z | 2026-08-20T17:49:38.044Z |
| CVE-2026-63495 |
7.5 (3.1)
|
Libevent: Unbounded memory accumulation in WebSocket s… |
libevent |
libevent |
2026-08-20T17:49:16.790Z | 2026-08-20T17:49:16.790Z |
| CVE-2026-63383 |
8.7 (4.0)
|
Libevent: decode_tag_internal() can lead to out-of-bou… |
libevent |
libevent |
2026-08-20T17:48:24.568Z | 2026-08-20T17:48:24.568Z |
| CVE-2026-72529 |
9.8 (3.1)
|
A remote unauthorized attacker with network acces… |
TrueConf |
TrueConf Server |
2026-08-19T16:55:14.949Z | 2026-08-20T17:48:24.155Z |
| CVE-2026-72530 |
9 (3.1)
|
A remote unauthorized attacker with network acces… |
TrueConf |
TrueConf Server |
2026-08-19T16:56:53.099Z | 2026-08-20T17:48:23.985Z |
| CVE-2026-60721 |
9.8 (3.1)
|
Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-08-18T20:59:01.099Z | 2026-08-20T17:44:27.453Z |
| CVE-2026-63388 |
8.4 (3.1)
|
Libevent: Heap out-of-bounds write in bufferevent_sock… |
libevent |
libevent |
2026-08-20T17:44:18.435Z | 2026-08-20T17:44:18.435Z |
| CVE-2026-76999 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
SourceCodester CET Automated Grading System with AI Pr… |
SourceCodester |
CET Automated Grading System with AI Predictive Analytics |
2026-08-20T15:45:08.190Z | 2026-08-20T17:43:57.887Z |
| CVE-2026-76956 |
5.9 (3.1)
|
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinte… |
libexpat project |
libexpat |
2026-08-20T04:22:51.381Z | 2026-08-20T17:42:38.849Z |
| CVE-2026-76993 |
2.3 (4.0)
5 (3.1)
5 (3.0)
|
GreyDGL PentestGPT Web-Page Crawling injection |
GreyDGL |
PentestGPT |
2026-08-20T14:30:10.560Z | 2026-08-20T17:42:27.768Z |
| CVE-2026-73253 |
9.1 (4.0)
|
Mongoose: TLS Hostname Verification Bypass via Overly … |
cesanta |
mongoose |
2026-08-20T17:41:02.495Z | 2026-08-20T17:41:02.495Z |
| CVE-2026-76760 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
chenhg5 cc-connect webhook.go authenticate code injection |
chenhg5 |
cc-connect |
2026-08-19T22:45:14.415Z | 2026-08-20T17:40:36.368Z |
| CVE-2026-73255 |
6.5 (3.1)
|
Mongoose: Path traversal in SSI #include directives en… |
cesanta |
mongoose |
2026-08-20T17:40:02.443Z | 2026-08-20T17:40:02.443Z |
| CVE-2026-60720 |
9.9 (3.1)
|
Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-08-18T20:59:00.786Z | 2026-08-20T17:39:40.180Z |
| CVE-2026-73259 |
5.4 (3.1)
|
Mongoose: Reflected XSS via decoded URI in directory l… |
cesanta |
mongoose |
2026-08-20T17:39:16.147Z | 2026-08-20T17:39:16.147Z |
| CVE-2026-60716 |
8.8 (3.1)
|
Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-08-18T20:59:00.469Z | 2026-08-20T17:38:09.587Z |
| CVE-2026-77025 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
itsourcecode Hospital Management System viewappointmen… |
itsourcecode |
Hospital Management System |
2026-08-20T17:00:09.124Z | 2026-08-20T17:38:06.709Z |
| CVE-2026-73256 |
9.1 (3.1)
|
Mongoose: HTTP/1.0 detection off-by-one enables reques… |
cesanta |
mongoose |
2026-08-20T17:37:54.505Z | 2026-08-20T17:37:54.505Z |
| CVE-2026-73254 |
5.4 (3.1)
|
Mongoose: Stored XSS via unescaped filenames in direct… |
cesanta |
mongoose |
2026-08-20T17:37:17.245Z | 2026-08-20T17:37:17.245Z |
| CVE-2026-73258 |
6.5 (3.1)
|
Mongoose: Multipart boundary/header scan logic error i… |
cesanta |
mongoose |
2026-08-20T17:36:39.239Z | 2026-08-20T17:36:39.239Z |
| CVE-2026-73251 |
9.3 (4.0)
|
Mongoose Built-in TLS: CA-bundle certificate chain acc… |
cesanta |
mongoose |
2026-08-20T17:34:50.472Z | 2026-08-20T17:34:50.472Z |
| CVE-2026-60672 |
9.8 (3.1)
|
Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
Oracle WebLogic Server |
2026-08-18T20:58:56.901Z | 2026-08-20T17:34:34.582Z |
| CVE-2026-60592 |
8.2 (3.1)
|
Vulnerability in the MySQL Cluster product of Ora… |
Oracle Corporation |
MySQL Cluster |
2026-08-18T20:58:56.581Z | 2026-08-20T17:33:43.961Z |