Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2026-8937 | Missing Authorization in GitLab | 2026-10-06T12:10:24.619Z | 2026-10-06T12:12:21.709Z |
| bit-gitlab-2026-84739 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2026-10-06T12:10:11.458Z | 2026-10-06T12:12:21.709Z |
| bit-gitlab-2026-4523 | Missing Authorization in GitLab | 2026-10-06T12:09:02.474Z | 2026-10-06T12:12:21.709Z |
| bit-gitlab-2026-10518 | Incorrect Authorization in GitLab | 2026-10-06T12:06:54.737Z | 2026-10-06T12:12:21.709Z |
| bit-virtualenv-2026-102938 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection | 2026-10-06T11:57:39.681Z | 2026-10-06T12:12:21.709Z |
| bit-virtualenv-2026-102937 | virtualenv: Command injection via --prompt in activate.bat (batch activator) | 2026-10-06T11:57:38.510Z | 2026-10-06T12:12:21.709Z |
| bit-virtualenv-2026-102930 | virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use | 2026-10-06T11:57:37.353Z | 2026-10-06T12:12:21.709Z |
| bit-virtualenv-2026-102925 | virtualenv bash and fish activation scripts execute commands embedded in paths | 2026-10-06T11:57:36.174Z | 2026-10-06T12:12:21.709Z |
| bit-grafana-2026-81842 | Library panel can be moved into a folder without library panel create permission | 2026-10-06T11:44:57.778Z | 2026-10-06T12:12:21.709Z |
| bit-grafana-2026-81841 | Paused shared dashboard access tokens still expose data source configuration | 2026-10-06T11:44:56.354Z | 2026-10-06T12:12:21.709Z |
| bit-jupyterlab-2026-102904 | JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs | 2026-10-06T11:44:18.332Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-93546 | Apache HTTP Server: mod_dav_fs namespace overflow | 2026-10-06T11:41:09.369Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-79768 | Apache HTTP Server: mod_userdir information disclosure | 2026-10-06T11:41:07.794Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-73637 | Apache HTTP Server: mod_auth_digest DoS attack | 2026-10-06T11:41:06.358Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-73636 | Apache HTTP Server: mod_auth_digest one-time-nonce replay attack | 2026-10-06T11:41:04.815Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-63686 | Apache HTTP Server: mod_xml2enc crash on charset conversion failure | 2026-10-06T11:41:03.404Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-63292 | Apache HTTP Server: mod_vhost_alias stack overflow | 2026-10-06T11:41:02.070Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-63045 | Apache HTTP Server: mod_proxy_ftp PASV address handling | 2026-10-06T11:41:00.513Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-59797 | Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function | 2026-10-06T11:40:58.873Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-59685 | Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM | 2026-10-06T11:40:57.523Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-58415 | Apache HTTP Server: mod_dav_fs property database read access | 2026-10-06T11:40:56.066Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-57941 | Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy | 2026-10-06T11:40:54.676Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-56449 | Apache HTTP Server: mod_proxy_html: crash in dump_content | 2026-10-06T11:40:53.280Z | 2026-10-06T12:12:21.709Z |
| bit-apache-2026-56154 | Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} | 2026-10-06T11:40:51.830Z | 2026-10-06T12:12:21.709Z |
| bit-python-2026-12345 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | 2026-10-05T11:56:26.851Z | 2026-10-05T12:12:53.169Z |
| bit-moodle-2026-102588 | Moodle: csrf in xml grade import | 2026-10-05T11:55:35.760Z | 2026-10-05T12:12:53.169Z |
| bit-moodle-2026-102587 | Moodle: user list filters bypass profile field visibility | 2026-10-05T11:55:34.249Z | 2026-10-05T12:12:53.169Z |
| bit-moodle-2026-102586 | Moodle: xss via password reset link due to insufficient username escaping | 2026-10-05T11:55:32.748Z | 2026-10-05T12:12:53.169Z |
| bit-moodle-2026-102585 | Moodle: group validation missing when enrolling user to course | 2026-10-05T11:55:31.390Z | 2026-10-05T12:12:53.169Z |
| bit-moodle-2026-102584 | Moodle: missing capability check allows unauthorised grade penalty recalculation | 2026-10-05T11:55:30.017Z | 2026-10-05T12:12:53.169Z |