Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20109 |
5.1 (4.0)
|
Unauthenticated Stored Vue Template Injection Leads to… |
misp |
cti-transmute |
2026-08-06T20:29:00.000Z | 2026-08-06T22:00:35.563165Z |
| GCVE-1-2026-20130 |
6.9 (4.0)
|
Stored Cross-Site Scripting in Chat and Forum Translat… |
ail-project |
ail-framework |
2026-08-06T17:04:00.000Z | 2026-08-06T17:08:41.601230Z |
| GCVE-1-2026-20168 |
6.9 (4.0)
|
Stored Cross-Site Scripting in AIL Framework Domain Sc… |
ail-project |
ail-framework |
2026-08-06T16:56:47.114370Z | 2026-08-06T16:57:13.164252Z |
| GCVE-1-2026-20147 |
8.2 (4.0)
|
Authenticated Reflected Cross-Site Scripting in Tag Er… |
ail-project |
ail-framework |
2026-08-06T16:47:00.000Z | 2026-08-06T16:48:38.055308Z |
| GCVE-1-2026-20111 |
8.8 (4.0)
|
Cross-Site Request Forgery in the Administrative User … |
misp |
cti-transmute |
2026-08-03T09:42:38.748873Z | 2026-08-03T09:42:53.991511Z |
| GCVE-1-2026-20064 |
8.7 (4.0)
|
Unauthenticated Denial of Service via Unbounded Activi… |
misp |
cti-transmute |
2026-08-03T09:20:06.797951Z | 2026-08-03T09:20:23.777077Z |
| GCVE-1-2026-20038 |
8.8 (4.0)
|
Server-Side Request Forgery and Local File Disclosure … |
misp |
cti-transmute |
2026-08-03T09:12:35.857068Z | 2026-08-03T09:12:51.486751Z |
| GCVE-1-2026-20061 |
6.9 (4.0)
|
Stored Cross-Site Scripting via Vue Template Injection… |
flowintel |
flowintel |
2026-08-03T08:45:39.378583Z | 2026-08-03T08:46:51.525092Z |
| GCVE-1-2026-20146 |
7.8 (4.0)
|
Open Redirect in MISP Installer-Generated Apache Confi… |
misp |
misp |
2026-07-28T14:30:07.486165Z | 2026-07-28T14:30:18.162845Z |
| GCVE-1-2026-20149 |
9.2 (4.0)
|
DOM-Based Cross-Site Scripting via Unsafe String and S… |
pivotick |
pivotick |
2026-07-28T13:53:22.770579Z | 2026-07-28T13:53:32.396211Z |
| GCVE-1-2026-20077 |
5.1 (4.0)
|
Pivotick Unvalidated Node Image URLs Allow Unintended … |
pivotick |
pivotick |
2026-07-28T13:31:59.211427Z | 2026-07-28T13:32:09.051521Z |
| GCVE-1-2026-20118 |
5.1 (4.0)
|
Pivotick Prototype-Key Collision in Tree Layout and Cy… |
pivotick |
pivotick |
2026-07-28T13:19:44.678787Z | 2026-07-28T13:20:04.318008Z |
| GCVE-1-2026-20063 |
6.3 (4.0)
|
Pivotick - Stored DOM-Based Cross-Site Scripting via U… |
pivotick |
pivotick |
2026-07-28T13:05:00.057987Z | 2026-07-28T13:05:10.222644Z |
| GCVE-1-2026-20113 |
8.2 (4.0)
|
Pivotick - Stack Exhaustion Denial of Service via Deep… |
Pivotick |
Pivotick |
2026-07-28T12:57:03.816845Z | 2026-07-28T12:57:17.810625Z |
| GCVE-1-2026-20032 |
6.9 (4.0)
|
Stored DOM-Based Cross-Site Scripting in Node Modal Headers |
Pivotick |
Pivotick |
2026-07-28T12:47:40.811433Z | 2026-07-28T12:47:54.517324Z |
| GCVE-1-2026-20067 |
8.2 (4.0)
|
DOM-Based Cross-Site Scripting via Unsanitized SVG Nod… |
pivotick |
pivotick |
2026-07-28T12:41:28.919891Z | 2026-07-28T12:42:08.667382Z |
| GCVE-1-2026-20075 |
6.9 (4.0)
|
Zip Bomb in Lookyloo Capture Upload Allows Denial of Service |
lookyloo |
lookyloo |
2026-07-28T12:18:55.710997Z | 2026-07-28T12:19:10.507016Z |
| GCVE-1-2026-20151 |
6.9 (4.0)
|
Cross-Site Scripting via Unsafe URL Schemes in Pivotic… |
pivotick |
pivotick |
2026-07-27T20:18:39.789672Z | 2026-07-27T20:19:38.523563Z |
| GCVE-1-2026-20140 |
9.2 (4.0)
|
Stored Cross-Site Scripting via Unsafe Capture Tree JS… |
lookyloo |
lookyloo |
2026-07-27T19:56:00.000Z | 2026-07-27T19:58:13.270747Z |
| GCVE-1-2026-20139 |
7.1 (4.0)
|
Cross-Capture Session Data Leakage Due to Shared Mutab… |
Lookyloo |
PlaywrightCapture |
2026-07-15T21:26:08.963556Z | 2026-07-15T21:26:19.854643Z |
| GCVE-1-2026-20007 |
8.3 (4.0)
|
Server-Side Request Forgery protection bypass in misp-… |
misp |
misp-modules |
2026-07-13T07:51:40.478167Z | 2026-07-13T07:52:02.354140Z |
| GCVE-1-2026-20003 |
5.3 (4.0)
|
MISP: Improper sharing group authorization check when … |
misp |
misp |
2026-07-09T15:05:37.386912Z | 2026-07-09T15:05:55.940926Z |
| GCVE-1-2026-20112 |
5.3 (4.0)
|
importModule function in MISP ignores per-organisation… |
misp |
misp |
2026-07-08T13:36:15.651888Z | 2026-07-08T13:36:48.095956Z |
| GCVE-1-2026-20004 |
5.3 (4.0)
|
MISP importModule missing authorization allows read-on… |
misp |
misp |
2026-07-08T13:29:57.644210Z | 2026-07-08T13:30:08.436075Z |
| GCVE-1-2026-20015 |
7.3 (4.0)
|
Potential local privileges escalation through argument… |
NoMachine |
NoMachine |
2026-06-10T14:56:00.000Z | 2026-07-07T15:04:35.841800Z |
| GCVE-1-2026-20103 |
7.1 (4.0)
|
Authenticated Path Traversal in AIL Framework PDF Obje… |
ail-project |
ail-framework |
2026-07-05T17:52:03.087783Z | 2026-07-05T17:52:20.481142Z |
| GCVE-1-2026-20055 |
9.2 (4.0)
|
Unauthenticated arbitrary MongoDB collection read in c… |
cve-search |
cve-search |
2026-07-05T12:01:00.000Z | 2026-07-05T12:43:45.547506Z |
| GCVE-1-2026-20087 |
9.4 (4.0)
|
MISP Core: Mass Assignment and Object Re-ownership via… |
misp |
misp |
2026-06-22T11:38:00.000Z | 2026-06-23T05:58:42.768204Z |
| GCVE-1-2026-20134 |
8.7 (4.0)
|
Authenticated Remote Code Execution via Arbitrary NDJS… |
misp |
misp |
2026-06-22T12:31:00.000Z | 2026-06-23T05:57:05.092862Z |
| GCVE-1-2026-20131 |
5.1 (4.0)
|
AIL Framework - Missing Rate Limiting Enables Brute-Fo… |
ail project |
ail framework |
2026-06-22T13:02:18.669480Z | 2026-06-22T13:02:27.300718Z |