Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-55611 |
0 (3.1)
|
AnythingLLM: embed-parsed-file cleanup deletes any par… |
Mintplex-Labs |
anything-llm |
2026-06-24T17:17:03.479Z | 2026-06-24T18:32:39.765Z |
| CVE-2026-55891 |
0 (3.1)
|
PrivateBin: Reflected JSON injection in backend respon… |
PrivateBin |
PrivateBin |
2026-08-28T20:23:50.477Z | 2026-08-31T18:47:39.096Z |
| CVE-2026-57501 |
0 (3.1)
|
Zen: Context-menu "Open link in glance" / "Split link … |
zen-browser |
desktop |
2026-07-09T22:27:34.962Z | 2026-07-10T20:59:23.914Z |
| CVE-2026-58026 |
0 (4.0)
|
$wgNonincludableNamespaces can be bypassed by embeddin… |
Wikimedia Foundation |
MediaWiki |
2026-07-01T15:10:34.559Z | 2026-07-01T15:50:17.256Z |
| CVE-2026-58028 |
0 (4.0)
|
Pretty-printed API output combined with centralauthtok… |
Wikimedia Foundation |
MediaWiki |
2026-07-01T15:15:17.250Z | 2026-07-01T15:50:39.761Z |
| CVE-2026-58031 |
0 (4.0)
|
Stored i18n XSS in Special:ApiSandbox when a deprecate… |
Wikimedia Foundation |
MediaWiki |
2026-07-01T14:24:21.084Z | 2026-07-01T14:45:46.186Z |
| CVE-2026-58034 |
0 (4.0)
|
Stored XSS through a system message when blocking a te… |
Wikimedia Foundation |
CheckUser |
2026-07-01T14:21:04.398Z | 2026-07-01T14:46:05.002Z |
| CVE-2026-58035 |
0 (4.0)
|
Stored XSS through a system message in the codex versi… |
Wikimedia Foundation |
MediaWiki |
2026-07-01T14:17:41.643Z | 2026-07-01T14:54:43.230Z |
| CVE-2026-58037 |
0 (4.0)
|
Core log entries for exceptions and XSS issues in log … |
Wikimedia Foundation |
MediaWiki |
2026-07-01T14:51:27.027Z | 2026-07-01T15:46:44.776Z |
| CVE-2026-58038 |
0 (4.0)
|
Stored XSS through javascript URLs in SVGs generated b… |
Wikimedia Foundation |
timeline |
2026-07-01T15:04:01.989Z | 2026-07-01T15:47:50.725Z |
| CVE-2026-61634 |
0 (4.0)
|
RabbitMQ Java client accepts broker frames larger than… |
rabbitmq |
rabbitmq-java-client |
2026-08-18T16:32:19.602Z | 2026-08-18T17:27:31.031Z |
| CVE-2026-72885 |
0 (4.0)
|
Dokploy: Authenticated Command Injection in Dokploy Do… |
Dokploy |
dokploy |
2026-08-10T19:31:36.859Z | 2026-08-11T14:36:45.390Z |
| CVE-2026-8857 |
0 (4.0)
|
Full RCE using EasyTimeline Extension |
Wikimedia Foundation |
timeline |
2026-07-01T15:08:49.425Z | 2026-07-01T15:49:55.764Z |
| CVE-2024-14024 |
0.1 (4.0)
|
Video Station |
QNAP Systems Inc. |
Video Station |
2026-03-11T08:02:03.876Z | 2026-03-11T14:12:35.283Z |
| CVE-2024-14025 |
0.1 (4.0)
|
Video Station |
QNAP Systems Inc. |
Video Station |
2026-03-11T08:02:09.214Z | 2026-03-11T13:52:24.375Z |
| CVE-2025-61647 |
0.3 (4.0)
|
UserInfoCard: Don't allow access to information about … |
Wikimedia Foundation |
CheckUser |
2026-02-03T00:02:04.402Z | 2026-03-03T15:41:15.912Z |
| CVE-2025-12940 |
0.5 (4.0)
|
Credentials recorded in logs in NETGEAR WAX610 and WAX610Y |
NETGEAR |
WAX610 |
2025-11-11T16:17:25.837Z | 2025-11-14T17:41:18.640Z |
| CVE-2025-59824 |
0.5 (4.0)
|
Omni Wireguard SideroLink potential escape |
siderolabs |
omni |
2025-09-24T19:48:23.935Z | 2025-09-24T20:09:36.681Z |
| CVE-2026-0289 |
0.5 (4.0)
|
Prisma Browser: Inappropriate Implementation in Accoun… |
Palo Alto Networks |
Prisma Browser |
2026-08-13T01:44:29.032Z | 2026-08-13T13:18:31.156Z |
| CVE-2026-0290 |
0.5 (4.0)
|
Prisma Browser: Sensitive Information Disclosure Vulne… |
Palo Alto Networks |
Prisma Browser |
2026-08-13T01:45:39.372Z | 2026-08-13T13:43:04.567Z |
| CVE-2026-33525 |
0.5 (4.0)
|
Authelia: Improper Neutralization of Input During Web … |
authelia |
authelia |
2026-03-26T19:22:57.418Z | 2026-03-30T14:55:38.565Z |
| CVE-2025-14266 |
0.6 (4.0)
|
CSRF in Ercom Cryptobox administration console |
Ercom |
Cryptobox |
2025-12-17T13:38:22.069Z | 2025-12-17T14:18:16.552Z |
| CVE-2025-30266 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:20:03.281Z | 2026-02-11T14:27:44.205Z |
| CVE-2025-30269 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:57.092Z | 2026-02-11T14:27:09.111Z |
| CVE-2025-48723 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:27.742Z | 2026-02-11T14:42:21.436Z |
| CVE-2025-48724 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:22.172Z | 2026-02-11T14:43:05.197Z |
| CVE-2025-48725 |
0.6 (4.0)
|
QuTS hero |
QNAP Systems Inc. |
QuTS hero |
2026-02-11T12:19:16.450Z | 2026-02-11T14:48:36.064Z |
| CVE-2025-52868 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:11.316Z | 2026-02-11T14:52:31.385Z |
| CVE-2025-52869 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:05.466Z | 2026-02-11T14:53:55.316Z |
| CVE-2025-52870 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:18:59.439Z | 2026-02-11T16:59:50.333Z |