Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20060 |
8.8 (4.0)
|
Missing Authentication Allows Unauthorized Creation of… |
ransomlook |
ransomlook |
2026-08-24T12:57:38.826361Z | 2026-08-24T12:57:54.973935Z |
| GCVE-1-2026-20038 |
8.8 (4.0)
|
Server-Side Request Forgery and Local File Disclosure … |
misp |
cti-transmute |
2026-08-03T09:12:35.857068Z | 2026-08-03T09:12:51.486751Z |
| GCVE-1-2026-0024 |
8.8 (4.0)
|
LDAP injection in MISP ApacheAuthenticate when using a… |
misp |
misp |
2026-04-08T08:28:00.000Z | 2026-04-09T04:44:04.936665Z |
| GCVE-1-2026-20227 |
8.7 (4.0)
|
MISP Event Delegation Mass Assignment Allows Retargeti… |
MISP |
MISP |
2026-09-30T09:09:00.000Z | 2026-09-30T09:12:45.330040Z |
| GCVE-1-2026-20173 |
8.7 (4.0)
|
Unauthenticated Disclosure of Scraping Credentials and… |
ransomlook |
ransomlook |
2026-08-24T13:55:40.557228Z | 2026-08-24T13:55:50.929761Z |
| GCVE-1-2026-20169 |
8.7 (4.0)
|
DJI Drone HTTP Media Server Allows Unauthenticated Acc… |
DJI |
Neo |
2026-08-24T07:23:00.946991Z | 2026-08-24T07:25:18.426734Z |
| GCVE-1-2026-20166 |
8.7 (4.0)
|
Private Group and Market Posts Disclosed Through Publi… |
ransomlook |
ransomlook |
2026-08-24T13:26:41.992725Z | 2026-08-24T13:26:52.078718Z |
| GCVE-1-2026-20153 |
8.7 (4.0)
|
MISP Background Job Argument Injection via Console Pat… |
misp |
misp |
2026-09-17T16:23:00.000Z | 2026-09-22T07:42:03.681655Z |
| GCVE-1-2026-20135 |
8.7 (4.0)
|
cti-transmute Unauthenticated SSRF via Hostnames Resol… |
MISP |
cti-transmute |
2026-08-11T09:01:14.732021Z | 2026-08-11T09:01:22.208859Z |
| GCVE-1-2026-20134 |
8.7 (4.0)
|
Authenticated Remote Code Execution via Arbitrary NDJS… |
misp |
misp |
2026-06-22T12:31:00.000Z | 2026-06-23T05:57:05.092862Z |
| GCVE-1-2026-20093 |
8.7 (4.0)
|
MISP Unauthenticated Mail Endpoints Allow Unbounded St… |
MISP |
MISP |
2026-09-07T13:03:00.000Z | 2026-09-14T06:43:20.942852Z |
| GCVE-1-2026-20064 |
8.7 (4.0)
|
Unauthenticated Denial of Service via Unbounded Activi… |
misp |
cti-transmute |
2026-08-03T09:20:06.797951Z | 2026-08-03T09:20:23.777077Z |
| GCVE-1-2026-20053 |
8.7 (4.0)
|
Denial of Service in MISP-STIX Import via Malformed or… |
misp |
misp-stix |
2026-08-21T09:54:53.412150Z | 2026-08-21T09:55:05.204624Z |
| GCVE-1-2026-20048 |
8.7 (4.0)
|
MISP Privilege Escalation: Read-Only API Key User Can … |
MISP |
MISP |
2026-09-21T12:42:44.209048Z | 2026-09-21T12:42:51.306891Z |
| GCVE-1-2026-20016 |
8.7 (4.0)
|
Cerebrate before v1.37 allows mass assignment of recor… |
cerebrate |
cerebrate |
2026-06-11T07:29:00.000Z | 2026-06-11T07:31:26.096364Z |
| GCVE-1-2026-20014 |
8.7 (4.0)
|
Unbounded DAA Decompression in Pandora Allows Denial o… |
pandora-analysis |
pandora |
2026-08-15T21:53:16.784670Z | 2026-08-15T21:56:41.916240Z |
| GCVE-1-2026-0011 |
8.7 (4.0)
|
Out-of-bounds memory write in the network packet … |
EA Games |
Command & Conquer: Generals |
2026-01-29T14:37:00.000Z | 2026-01-29T14:39:17.728822Z |
| GCVE-1-2026-20235 |
8.6 (4.0)
|
MISP Sharing Group Quick-Edit Actions Allow CSRF via S… |
misp |
misp |
2026-09-04T09:27:00.000Z | 2026-09-10T07:44:51.336437Z |
| GCVE-1-2026-20211 |
8.6 (4.0)
|
Missing Rate Limiting in Email OTP Verification Allows… |
misp |
misp |
2026-09-03T15:22:47.338907Z | 2026-09-03T15:22:56.897702Z |
| GCVE-1-2026-20176 |
8.6 (4.0)
|
Flowintel Alert Settings Configuration Allows Remote C… |
flowintel |
flowintel |
2026-08-27T10:22:00.000Z | 2026-08-27T11:29:57.274409Z |
| GCVE-1-2026-20019 |
8.6 (4.0)
|
MISP Tag Collection Save Allows Privilege Escalation v… |
MISP |
MISP |
2026-09-30T10:16:09.364718Z | 2026-09-30T10:16:16.553111Z |
| GCVE-1-2026-20009 |
8.6 (4.0)
|
MISP Blocklist Workflow Module: Arbitrary Script Execu… |
MISP |
MISP |
2026-09-21T12:51:51.619869Z | 2026-09-21T12:52:01.169089Z |
| GCVE-1-2026-20005 |
8.6 (4.0)
|
Flowintel Organization Administrator Can Reset Full Ad… |
flowintel |
flowintel |
2026-08-27T13:14:13.262903Z | 2026-08-27T13:14:18.765357Z |
| GCVE-1-2026-20279 |
8.5 (4.0)
|
Stored Cross-Site Scripting (XSS) in AIL Framework Use… |
ail project |
ail framework |
2026-09-25T13:29:00.000Z | 2026-09-25T13:55:11.866831Z |
| GCVE-1-2026-20239 |
8.5 (4.0)
|
Stored XSS in AIL Framework extracted-match popovers v… |
ail project |
ail framework |
2026-09-25T13:13:00.000Z | 2026-09-25T13:54:03.667825Z |
| GCVE-1-2026-20206 |
8.5 (4.0)
|
MISP Overmind: Stored Cross-Site Scripting via Unescap… |
misp |
misp |
2026-09-17T16:29:00.000Z | 2026-09-22T07:36:39.504987Z |
| GCVE-1-2026-20018 |
8.5 (4.0)
|
DJI Drone Bluetooth Interface Unauthenticated DUML Com… |
DJI |
Neo |
2026-08-24T08:05:00.000Z | 2026-10-12T12:08:34.359422Z |
| GCVE-1-2026-0023 |
8.5 (4.0)
|
Stored XSS in modal item preview for long item content… |
ail-project |
ail-framework |
2026-04-07T06:29:00.000Z | 2026-04-08T04:22:15.084342Z |
| GCVE-1-2026-0006 |
8.5 (4.0)
|
Improper Access Control in Cerebrate AuthKey and Encry… |
cerebrate |
cerebrate |
2026-01-13T15:37:17.337254Z | 2026-01-13T15:37:17.337254Z |
| GCVE-1-2026-0005 |
8.5 (4.0)
|
Improper Access Control in Cerebrate Alignment Model A… |
cerebrate |
cerebrate |
2026-01-13T15:31:00.000Z | 2026-01-13T15:38:02.888546Z |