Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2025-0005 |
9.4 (4.0)
|
Reflected XSS due to insecure use of Markup |
CIRCL |
vulnerability-lookup |
2025-10-13T08:23:29.812914Z | 2025-10-13T08:23:29.812914Z |
| GCVE-1-2026-20246 |
9.3 (4.0)
|
MISP LdapAuth and LinOTPAuth Authentication Bypass via… |
MISP |
MISP |
2026-09-14T13:21:56.766377Z | 2026-09-14T13:22:05.347324Z |
| GCVE-1-2026-20209 |
9.3 (4.0)
|
Path traversal in Pandora archive extractor allows arb… |
pandora-analysis |
pandora |
2026-09-09T21:34:00.000Z | 2026-09-09T21:55:15.070161Z |
| GCVE-1-2026-20194 |
9.3 (4.0)
|
MISP TOTP Code Replay Allows Duplicate Authentication … |
MISP |
MISP |
2026-10-01T08:08:43.998140Z | 2026-10-01T08:08:53.306604Z |
| GCVE-1-2026-20105 |
9.3 (4.0)
|
MISP remote code execution via arbitrary rdkafka confi… |
misp |
misp |
2026-06-22T12:39:13.015122Z | 2026-06-22T12:39:24.277077Z |
| GCVE-1-2026-20091 |
9.3 (4.0)
|
MISP AAD authentication plugin - Improper OAuth State … |
misp |
misp |
2026-06-22T12:21:00.000Z | 2026-06-22T12:24:50.403439Z |
| GCVE-1-2026-20042 |
9.3 (4.0)
|
DJI Drone FTP Service Allows Unrestricted Storage Cons… |
DJI |
Neo |
2026-08-24T07:01:00.000Z | 2026-08-27T16:22:40.055465Z |
| GCVE-1-2026-0030 |
9.3 (4.0)
|
MISP - Improper access control in auth key reset allow… |
misp |
misp |
2026-04-29T20:10:00.000Z | 2026-05-06T16:01:17.334511Z |
| GCVE-1-2026-0028 |
9.3 (4.0)
|
LookyLoo - PlaywrightCapture permits access to local f… |
LookyLoo |
PlaywrightCapture |
2026-04-29T19:28:00.000Z | 2026-04-29T19:28:44.316023Z |
| GCVE-1-2026-0026 |
9.3 (4.0)
|
misp-modules website - Missing CSRF protection in the … |
misp |
misp-modules |
2026-04-29T09:24:00.000Z | 2026-05-06T16:04:44.788582Z |
| GCVE-1-2026-0010 |
9.3 (4.0)
|
Improper input validation in the file transfer ha… |
EA Games |
Command & Conquer: Generals |
2026-01-29T14:33:18.822829Z | 2026-01-29T14:33:18.822829Z |
| GCVE-1-2026-0009 |
9.3 (4.0)
|
Stack-based buffer overflow in the multiplayer ne… |
EA Games |
Command & Conquer: Generals |
2026-01-29T14:30:38.596928Z | 2026-01-29T14:30:38.596928Z |
| GCVE-1-2025-0006 |
9.3 (4.0)
|
Potential XSS in admin CPE in organization model |
CIRCL |
vulnerability-lookup |
2025-10-13T08:29:00.000Z | 2025-10-13T08:52:23.411325Z |
| GCVE-1-2025-0003 |
9.3 (4.0)
|
Incorrect ACL for user settings edit, which previ… |
cerebrate |
cerebrate |
2025-08-22T12:33:00.000Z | 2025-08-23T07:55:10.950332Z |
| GCVE-1-2026-20149 |
9.2 (4.0)
|
DOM-Based Cross-Site Scripting via Unsafe String and S… |
pivotick |
pivotick |
2026-07-28T13:53:22.770579Z | 2026-07-28T13:53:32.396211Z |
| GCVE-1-2026-20140 |
9.2 (4.0)
|
Stored Cross-Site Scripting via Unsafe Capture Tree JS… |
lookyloo |
lookyloo |
2026-07-27T19:56:00.000Z | 2026-07-27T19:58:13.270747Z |
| GCVE-1-2026-20137 |
9.2 (4.0)
|
RansomLook Missing Authorization Allows Disclosure of … |
ransomlook |
ransomlook |
2026-08-24T13:09:11.020129Z | 2026-08-24T13:09:20.280924Z |
| GCVE-1-2026-20055 |
9.2 (4.0)
|
Unauthenticated arbitrary MongoDB collection read in c… |
cve-search |
cve-search |
2026-07-05T12:01:00.000Z | 2026-07-05T12:43:45.547506Z |
| GCVE-1-2026-20050 |
9.2 (4.0)
|
RansomLook Unauthenticated Database Export Exposes Pri… |
ransomlook |
ransomlook |
2026-08-24T13:03:04.849291Z | 2026-08-24T13:03:20.979300Z |
| GCVE-1-2026-20200 |
9.1 (4.0)
|
Flowintel Fails to Invalidate Active Sessions After Pa… |
flowintel |
flowintel |
2026-08-27T13:32:37.993094Z | 2026-08-27T13:32:44.650130Z |
| GCVE-1-2026-20092 |
9 (4.0)
|
MISP user edit endpoint mass assignment vulnerability … |
misp |
misp |
2026-06-04T14:37:00.000Z | 2026-06-12T06:57:43.643196Z |
| GCVE-1-2025-0015 |
9 (4.0)
|
Potential XSS in decaying simulation tool |
misp |
misp |
2025-11-04T09:06:00.000Z | 2025-11-04T09:06:59.216121Z |
| GCVE-1-2025-0002 |
8.9 (4.0)
|
Command Injection in Cl0p Exfiltration Python Script |
Cl0p ransomware |
exfiltration |
2025-07-01T08:19:00.000Z | 2025-07-01T10:58:58.443468Z |
| GCVE-1-2026-20174 |
8.8 (4.0)
|
Path Traversal in MISP Object Template Resolution Duri… |
misp |
misp-stix |
2026-08-21T09:48:06.996945Z | 2026-08-21T09:48:16.277512Z |
| GCVE-1-2026-20159 |
8.8 (4.0)
|
Reusable Account Activation and Recovery Tokens Allow … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:32:19.932784Z | 2026-08-12T14:32:52.007745Z |
| GCVE-1-2026-20148 |
8.8 (4.0)
|
Stored Cross-Site Scripting via Untrusted Cryptocurren… |
ransomlook |
ransomlook |
2026-08-24T14:13:04.261321Z | 2026-08-24T14:13:17.001464Z |
| GCVE-1-2026-20111 |
8.8 (4.0)
|
Cross-Site Request Forgery in the Administrative User … |
misp |
cti-transmute |
2026-08-03T09:42:38.748873Z | 2026-08-03T09:42:53.991511Z |
| GCVE-1-2026-20104 |
8.8 (4.0)
|
MISP cullEmptyEvents CSRF Allows Irreversible Deletion… |
misp |
misp |
2026-09-03T15:12:44.713069Z | 2026-09-03T15:12:56.376460Z |
| GCVE-1-2026-20086 |
8.8 (4.0)
|
RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:19:50.807894Z | 2026-08-24T19:19:59.130934Z |
| GCVE-1-2026-20068 |
8.8 (4.0)
|
MISP mass assignment vulnerabilities allow unauthorize… |
misp |
misp |
2026-06-12T19:59:32.150071Z | 2026-06-12T19:59:41.302526Z |