Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-86098 | ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape | 2026-09-09T01:03:40.000Z | 2026-09-09T01:03:40.000Z |
| msrc_cve-2026-18149 | undici vulnerable to Denial of Service via orphaned RetryHandler response body | 2026-09-09T01:03:32.000Z | 2026-09-09T01:03:32.000Z |
| msrc_cve-2026-18540 | undici vulnerable to downstream response splitting via retry interceptor | 2026-09-09T01:03:24.000Z | 2026-09-09T01:03:24.000Z |
| msrc_cve-2026-85769 | Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize | 2026-09-09T01:02:29.000Z | 2026-09-09T01:02:29.000Z |
| msrc_cve-2026-85197 | Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload | 2026-09-09T01:02:20.000Z | 2026-09-09T01:02:20.000Z |
| msrc_cve-2026-85534 | Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read | 2026-09-09T01:02:12.000Z | 2026-09-09T01:02:12.000Z |
| msrc_cve-2026-71224 | Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk | 2026-09-09T01:02:03.000Z | 2026-09-09T01:02:03.000Z |
| msrc_cve-2026-71219 | Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal | 2026-09-09T01:01:52.000Z | 2026-09-09T01:01:52.000Z |
| msrc_cve-2026-71222 | Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing | 2026-09-09T01:01:44.000Z | 2026-09-09T01:01:44.000Z |
| msrc_cve-2026-71221 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta | 2026-09-09T01:01:36.000Z | 2026-09-09T01:01:36.000Z |
| msrc_cve-2026-71220 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit | 2026-09-09T01:01:27.000Z | 2026-09-09T01:01:27.000Z |
| msrc_cve-2026-80255 | secure cookie attribute bypass with tab | 2026-09-08T01:04:43.000Z | 2026-09-09T01:58:23.000Z |
| msrc_cve-2026-80229 | OpenSSL provider use-after-free | 2026-09-08T01:04:30.000Z | 2026-09-09T01:58:09.000Z |
| msrc_cve-2026-80230 | OpenSSL pinning bypass | 2026-09-08T01:04:17.000Z | 2026-09-09T01:56:58.000Z |
| msrc_cve-2026-82209 | domain-scoped PSL domain cookie | 2026-09-08T01:03:58.000Z | 2026-09-09T01:56:38.000Z |
| msrc_cve-2026-18924 | HTTP/2 server push UAF | 2026-09-08T01:03:36.000Z | 2026-09-09T01:57:40.000Z |
| msrc_cve-2026-13608 | OpenLDAP SASL authentication bypass | 2026-09-08T01:03:10.000Z | 2026-09-09T01:57:56.000Z |
| msrc_cve-2026-80231 | native CA store conn reuse | 2026-09-08T01:02:37.000Z | 2026-09-09T01:56:20.000Z |
| msrc_cve-2026-82208 | wolfSSL CA-cache hit overrides callback | 2026-09-08T01:02:15.000Z | 2026-09-09T01:55:54.000Z |
| msrc_cve-2026-19931 | Negotiate ambient user conn reuse | 2026-09-08T01:01:57.000Z | 2026-09-09T01:57:22.000Z |
| msrc_cve-2026-78408 | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | 2026-09-07T02:03:00.000Z | 2026-09-07T02:03:00.000Z |
| msrc_cve-2026-78410 | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | 2026-09-07T02:02:52.000Z | 2026-09-07T02:02:52.000Z |
| msrc_cve-2026-84838 | Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() | 2026-09-07T02:02:43.000Z | 2026-09-07T02:02:43.000Z |
| msrc_cve-2026-84233 | Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames | 2026-09-07T02:02:35.000Z | 2026-09-07T02:02:35.000Z |
| msrc_cve-2026-0665 | Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq | 2026-09-07T02:02:27.000Z | 2026-09-09T01:51:15.000Z |
| msrc_cve-2026-83611 | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content | 2026-09-07T02:02:19.000Z | 2026-09-09T01:51:09.000Z |
| msrc_cve-2026-83613 | xmldom: Quadratic-time attribute deduplication | 2026-09-07T02:02:05.000Z | 2026-09-09T01:50:51.000Z |
| msrc_cve-2026-83610 | xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization | 2026-09-07T02:01:42.000Z | 2026-09-09T01:50:21.000Z |
| msrc_cve-2026-83619 | xmldom: End-tag Whitespace-Trim Regex ReDoS β quadratic backtracking in the 0.8.x end-tag parser | 2026-09-07T02:01:33.000Z | 2026-09-09T01:50:15.000Z |
| msrc_cve-2026-18329 | NGINX ngx_http_js_module vulnerability | 2026-09-07T02:01:17.000Z | 2026-09-07T02:01:17.000Z |