Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20248 |
5.3 (4.0)
|
MISP: Soft-Deleted Attributes from Other Organizations… |
MISP |
MISP |
2026-10-02T16:09:31.553352Z | 2026-10-02T16:09:38.126317Z |
| GCVE-1-2026-20312 |
7.1 (4.0)
|
MISP Correlation Authorization Bypass Exposes Restrict… |
MISP |
MISP |
2026-10-02T16:04:40.155171Z | 2026-10-02T16:04:47.848957Z |
| GCVE-1-2026-20165 |
5.3 (4.0)
|
MISP Information Disclosure via Related Events Listing… |
MISP |
MISP |
2026-10-02T16:01:15.540228Z | 2026-10-02T16:01:27.102405Z |
| GCVE-1-2026-20189 |
7.1 (4.0)
|
MISP Decaying Model Import Mass Assignment Allows Cros… |
MISP |
MISP |
2026-10-02T15:56:06.623063Z | 2026-10-02T15:56:12.407791Z |
| GCVE-1-2026-20154 |
4.8 (4.0)
|
MISP: JavaScript Injection via Remote Tag ID in Event … |
MISP |
MISP |
2026-10-02T15:51:26.684280Z | 2026-10-02T15:51:32.620284Z |
| GCVE-1-2026-20251 |
6.2 (4.0)
|
MISP TAXII Object Viewer Stored XSS via Unescaped JSON… |
MISP |
MISP |
2026-10-02T15:49:26.036803Z | 2026-10-02T15:49:31.534659Z |
| GCVE-1-2026-20296 |
5.1 (4.0)
|
MISP ID Translator: Unescaped Remote Event ID Enables … |
MISP |
MISP |
2026-10-02T15:21:32.442817Z | 2026-10-02T15:21:47.640145Z |
| GCVE-1-2026-20230 |
5.3 (4.0)
|
MISP Stored XSS via Unescaped Count Field Value in Rem… |
MISP |
MISP |
2026-10-02T15:16:19.969609Z | 2026-10-02T15:16:25.390743Z |
| GCVE-1-2026-20244 |
5.3 (4.0)
|
MISP Incomplete Thread Authorization Allows Unauthoriz… |
MISP |
MISP |
2026-10-01T11:31:25.274200Z | 2026-10-01T11:31:31.176439Z |
| GCVE-1-2026-20241 |
4.8 (4.0)
|
MISP Reflected Cross-Site Scripting via Unsanitized An… |
MISP |
MISP |
2026-10-01T08:55:43.692084Z | 2026-10-01T08:55:50.070131Z |
| GCVE-1-2026-20300 |
5.1 (4.0)
|
MISP Reflected XSS in Taxonomy Tag Confirmation Forms |
MISP |
MISP |
2026-10-01T08:48:29.795091Z | 2026-10-01T08:48:36.628843Z |
| GCVE-1-2026-20257 |
7.1 (4.0)
|
MISP: Object Distribution ACL Bypass via Event Flatten… |
MISP |
MISP |
2026-10-01T08:32:55.873922Z | 2026-10-01T08:33:03.298255Z |
| GCVE-1-2026-20194 |
9.3 (4.0)
|
MISP TOTP Code Replay Allows Duplicate Authentication … |
MISP |
MISP |
2026-10-01T08:08:43.998140Z | 2026-10-01T08:08:53.306604Z |
| GCVE-1-2026-20307 |
7.6 (4.0)
|
MISP HOTP Token Replay via Stale Session-Cached Counte… |
MISP |
MISP |
2026-10-01T07:24:12.952115Z | 2026-10-01T07:34:00.932644Z |
| GCVE-1-2026-20142 |
6.2 (4.0)
|
MISP Stored Cross-Site Scripting via Unvalidated Galax… |
MISP |
MISP |
2026-09-30T14:25:50.603841Z | 2026-09-30T14:25:57.591909Z |
| GCVE-1-2026-20256 |
6.2 (4.0)
|
MISP Stored Cross-Site Scripting via JavaScript URL in… |
MISP |
MISP |
2026-09-30T14:22:25.402175Z | 2026-09-30T14:22:33.037624Z |
| GCVE-1-2026-20294 |
8.3 (4.0)
|
MISP Stored Cross-Site Scripting (XSS) via Unvalidated… |
MISP |
MISP |
2026-09-30T12:18:47.503336Z | 2026-09-30T12:18:55.326462Z |
| GCVE-1-2026-20019 |
8.6 (4.0)
|
MISP Tag Collection Save Allows Privilege Escalation v… |
MISP |
MISP |
2026-09-30T10:16:09.364718Z | 2026-09-30T10:16:16.553111Z |
| GCVE-1-2026-20280 |
8.3 (4.0)
|
MISP: Nested Model Alias Key Bypasses Sanitization to … |
MISP |
MISP |
2026-09-30T09:56:28.525185Z | 2026-09-30T09:56:33.959884Z |
| GCVE-1-2026-20227 |
8.7 (4.0)
|
MISP Event Delegation Mass Assignment Allows Retargeti… |
MISP |
MISP |
2026-09-30T09:09:00.000Z | 2026-09-30T09:12:45.330040Z |
| GCVE-1-2026-20252 |
6.3 (4.0)
|
Vulnerability-Lookup - Race Condition in Account Recov… |
vulnerability-lookup |
vulnerability-lookup |
2026-09-27T14:47:33.302690Z | 2026-09-27T14:47:50.875076Z |
| GCVE-1-2026-20183 |
6.3 (4.0)
|
Ail Framework Crawler: Missing Cookiejar Authorization… |
ail project |
ail framework |
2026-09-25T13:35:00.000Z | 2026-09-25T13:55:39.228706Z |
| GCVE-1-2026-20279 |
8.5 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Use… |
ail project |
ail framework |
2026-09-25T13:29:00.000Z | 2026-09-25T13:55:11.866831Z |
| GCVE-1-2026-20269 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Tag… |
ail project |
ail framework |
2026-09-25T13:21:00.000Z | 2026-09-25T13:54:48.431524Z |
| GCVE-1-2026-20239 |
8.5 (4.0)
|
Stored XSS in AIL Framework extracted-match popovers v… |
ail project |
ail framework |
2026-09-25T13:13:00.000Z | 2026-09-25T13:54:03.667825Z |
| GCVE-1-2026-20276 |
6.9 (4.0)
|
AIL Framework Onion Module: Non-Onion URL Accepted as … |
ail project |
ail framework |
2026-09-25T13:40:00.000Z | 2026-09-25T13:53:04.756019Z |
| GCVE-1-2026-20292 |
6.3 (4.0)
|
Stored Cross-Site Scripting (XSS) via Crawler Capture … |
ail project |
ail framework |
2026-09-25T13:49:00.000Z | 2026-09-25T13:52:14.626493Z |
| GCVE-1-2026-20108 |
8.4 (4.0)
|
Broken authorization in Akia keyless entry lets an aut… |
akia |
akia |
2026-09-25T09:44:00.000Z | 2026-09-25T10:07:22.429982Z |
| GCVE-1-2026-20190 |
6.3 (4.0)
|
misp-modules: Shell Command Injection in MISP cisco_fi… |
misp |
misp-modules |
2026-09-25T08:02:00.000Z | 2026-09-25T09:49:45.859656Z |
| GCVE-1-2026-20263 |
7.7 (4.0)
|
MISP: PHP phar stream wrapper enables deserialization … |
MISP |
MISP |
2026-09-22T15:08:51.542843Z | 2026-09-22T15:09:05.089365Z |