Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20183 |
6.3 (4.0)
|
Ail Framework Crawler: Missing Cookiejar Authorization… |
ail project |
ail framework |
2026-09-25T13:35:00.000Z | 2026-09-25T13:55:39.228706Z |
| GCVE-1-2026-20279 |
8.5 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Use… |
ail project |
ail framework |
2026-09-25T13:29:00.000Z | 2026-09-25T13:55:11.866831Z |
| GCVE-1-2026-20269 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Tag… |
ail project |
ail framework |
2026-09-25T13:21:00.000Z | 2026-09-25T13:54:48.431524Z |
| GCVE-1-2026-20239 |
8.5 (4.0)
|
Stored XSS in AIL Framework extracted-match popovers v… |
ail project |
ail framework |
2026-09-25T13:13:00.000Z | 2026-09-25T13:54:03.667825Z |
| GCVE-1-2026-20108 |
8.4 (4.0)
|
Broken authorization in Akia keyless entry lets an aut… |
akia |
akia |
2026-09-25T09:44:00.000Z | 2026-09-25T10:07:22.429982Z |
| GCVE-1-2026-20190 |
6.3 (4.0)
|
misp-modules: Shell Command Injection in MISP cisco_fi… |
misp |
misp-modules |
2026-09-25T08:02:00.000Z | 2026-09-25T09:49:45.859656Z |
| GCVE-1-2026-20263 |
7.7 (4.0)
|
MISP: PHP phar stream wrapper enables deserialization … |
MISP |
MISP |
2026-09-22T15:08:51.542843Z | 2026-09-22T15:09:05.089365Z |
| GCVE-1-2026-20240 |
5.3 (4.0)
|
MISP ACLComponent: Typo in previewEventAttributes ACL … |
MISP |
MISP |
2026-09-22T14:59:06.674611Z | 2026-09-22T14:59:19.861474Z |
| GCVE-1-2026-20024 |
6.9 (4.0)
|
MISP: Disabled-user check ineffective in pre-authentic… |
MISP |
MISP |
2026-09-22T14:53:44.090577Z | 2026-09-22T14:53:53.418288Z |
| GCVE-1-2026-20270 |
5.1 (4.0)
|
MISP OrganisationsController File Existence and Image-… |
MISP |
MISP |
2026-09-22T14:49:29.214426Z | 2026-09-22T14:49:37.760620Z |
| GCVE-1-2026-20065 |
5.1 (4.0)
|
MISP Path Traversal via Organization Name in Org-Stati… |
MISP |
MISP |
2026-09-22T14:44:11.001111Z | 2026-09-22T14:44:19.846758Z |
| GCVE-1-2026-20266 |
5.3 (4.0)
|
MISP Path Traversal in OrgImgHelper findOrgImage via C… |
MISP |
MISP |
2026-09-22T14:36:25.776959Z | 2026-09-22T14:36:33.546261Z |
| GCVE-1-2026-20182 |
5.3 (4.0)
|
MISP: Insufficient Authorization Allows Sharing Group … |
MISP |
MISP |
2026-09-22T14:31:15.792405Z | 2026-09-22T14:31:23.423452Z |
| GCVE-1-2026-20218 |
5.3 (4.0)
|
MISP Information Disclosure via Forged Upload Path |
MISP |
MISP |
2026-09-22T14:22:17.582050Z | 2026-09-22T14:22:26.802074Z |
| GCVE-1-2026-20095 |
5.3 (4.0)
|
MISP Missing Authorization on replaceSuggestionInRepor… |
MISP |
MISP |
2026-09-22T14:13:09.458019Z | 2026-09-22T14:13:21.739434Z |
| GCVE-1-2026-20285 |
5.3 (4.0)
|
MISP Overmind Event View Discloses Report Content Bypa… |
MISP |
MISP |
2026-09-22T14:06:46.948190Z | 2026-09-22T14:06:57.790167Z |
| GCVE-1-2026-20214 |
4.8 (4.0)
|
MISP Stored Cross-Site Scripting via Unescaped Organiz… |
MISP |
MISP |
2026-09-22T13:56:41.339200Z | 2026-09-22T13:56:48.987466Z |
| GCVE-1-2026-20205 |
6.9 (4.0)
|
MISP Unauthenticated Blind SSRF via XML Body Processing |
MISP |
MISP |
2026-09-22T13:50:38.640565Z | 2026-09-22T13:50:46.317940Z |
| GCVE-1-2026-20127 |
5.3 (4.0)
|
MISP EventsController queryEnrichment allows querying … |
MISP |
MISP |
2026-09-22T13:44:24.306583Z | 2026-09-22T13:44:31.694767Z |
| GCVE-1-2026-20271 |
5.3 (4.0)
|
MISP Collections: Missing Authorization Check for Shar… |
MISP |
MISP |
2026-09-22T13:20:11.113764Z | 2026-09-22T13:20:21.459826Z |
| GCVE-1-2026-20100 |
6.9 (4.0)
|
MISP Installer Log and FIFO Created World-Readable, Ex… |
MISP |
MISP |
2026-09-22T13:11:21.409005Z | 2026-09-22T13:11:38.072089Z |
| GCVE-1-2026-20129 |
5.1 (4.0)
|
MISP Reflected Cross-Site Scripting in Event Export Co… |
MISP |
MISP |
2026-09-22T13:01:34.828652Z | 2026-09-22T13:01:43.034034Z |
| GCVE-1-2026-20161 |
5.1 (4.0)
|
MISP Reflected Cross-Site Scripting in Attribute Histo… |
MISP |
MISP |
2026-09-22T12:54:36.084083Z | 2026-09-22T12:54:44.014502Z |
| GCVE-1-2026-20234 |
4.8 (4.0)
|
MISP Reflected XSS via Unvalidated Object Type in Anal… |
MISP |
MISP |
2026-09-22T12:40:00.000Z | 2026-09-22T12:41:23.369639Z |
| GCVE-1-2026-20261 |
6.9 (4.0)
|
MISP CSRF vulnerability in workflow moduleStatelessExe… |
MISP |
MISP |
2026-09-22T12:31:11.850218Z | 2026-09-22T12:31:20.402691Z |
| GCVE-1-2026-20043 |
7.1 (4.0)
|
MISP CSRF vulnerability allows unauthorized attribute … |
MISP |
MISP |
2026-09-21T13:50:37.643790Z | 2026-09-21T13:50:44.744216Z |
| GCVE-1-2026-20056 |
8.3 (4.0)
|
MISP Arbitrary Local File Read and SSRF via MISP Expor… |
MISP |
MISP |
2026-09-21T13:35:58.783318Z | 2026-09-21T13:36:11.123285Z |
| GCVE-1-2026-20106 |
6.3 (4.0)
|
MISP ObjectReferencesController: Granular Distribution… |
MISP |
MISP |
2026-09-21T13:25:31.534037Z | 2026-09-21T13:25:38.557803Z |
| GCVE-1-2026-20057 |
6.4 (4.0)
|
MISP Event Report Cross-Event Reparenting via Unscoped… |
MISP |
MISP |
2026-09-21T13:13:46.709115Z | 2026-09-21T13:13:54.565172Z |
| GCVE-1-2026-20009 |
8.6 (4.0)
|
MISP Blocklist Workflow Module: Arbitrary Script Execu… |
MISP |
MISP |
2026-09-21T12:51:51.619869Z | 2026-09-21T12:52:01.169089Z |