Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-53412 |
0.6 (4.0)
|
File Station 5 |
QNAP Systems Inc. |
File Station 5 |
2025-11-07T15:13:34.575Z | 2025-11-07T15:57:02.038Z |
| CVE-2025-53598 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:18:54.742Z | 2026-02-11T16:59:33.191Z |
| CVE-2025-68457 |
0.6 (4.0)
|
Orejime has executable code in HTML attributes |
boscop-fr |
orejime |
2025-12-19T16:40:30.258Z | 2026-01-13T16:53:35.324Z |
| CVE-2026-23999 |
0.6 (4.0)
|
Fleet: Device lock PIN can be predicted if lock time i… |
fleetdm |
fleet |
2026-02-26T02:45:48.099Z | 2026-02-26T15:15:55.289Z |
| CVE-2025-14714 |
0.9 (4.0)
|
TCC Bypass via Inherited Permissions in Bundled Interpreter |
The Document Foundation |
LibreOffice |
2025-12-15T10:30:55.796Z | 2025-12-15T13:13:17.791Z |
| CVE-2025-62843 |
0.9 (4.0)
|
QuRouter |
QNAP Systems Inc. |
QuRouter |
2026-03-20T16:22:02.680Z | 2026-03-25T14:01:14.557Z |
| CVE-2020-12492 |
1 (4.0)
|
Wifi information acquisition vulnerability in Framewor… |
vivo |
Framework |
2024-11-25T10:11:30.761Z | 2024-11-25T17:02:32.200Z |
| CVE-2024-12975 |
1 (4.0)
|
Silicon Labs CPC can leak information in full duplex SPI |
Silicon Labs |
Simplicity SDK |
2025-03-07T16:41:10.424Z | 2025-09-16T16:04:39.976Z |
| CVE-2024-38642 |
1 (4.0)
|
QuMagie |
QNAP Systems Inc. |
QuMagie |
2024-09-06T16:29:44.378Z | 2024-09-06T16:58:21.953Z |
| CVE-2024-51481 |
1 (4.0)
|
Nix allows macOS sandbox escape via built-in builders |
NixOS |
nix |
2024-10-31T16:10:22.398Z | 2024-10-31T16:51:59.101Z |
| CVE-2024-5899 |
1 (4.0)
|
Improper trust check in Bazel Build intellij plugin |
BazelBuild |
intellij plugin |
2024-06-18T08:12:52.772Z | 2025-09-11T14:15:40.191Z |
| CVE-2025-11598 |
1 (4.0)
|
Exposure of Confidential Information in mObywatel appl… |
Centralny Ośrodek Informatyki |
mObywatel |
2026-02-03T11:33:55.993Z | 2026-02-03T15:17:33.953Z |
| CVE-2025-12888 |
1 (4.0)
|
Constant Time Issue with Xtensa-based ESP32 and X22519 |
wolfSSL |
wolfSSL |
2025-11-21T22:50:30.510Z | 2025-12-08T15:51:56.735Z |
| CVE-2025-13912 |
1 (4.0)
|
Potential non-constant time compiled code with Clang LLVM |
wolfSSL |
wolfSSL |
2025-12-11T17:09:59.098Z | 2025-12-11T19:35:56.056Z |
| CVE-2025-24959 |
1 (4.0)
|
Environment Variable Injection for dotenv API in zx |
google |
zx |
2025-02-03T20:48:16.507Z | 2025-02-12T20:51:25.848Z |
| CVE-2025-27608 |
1 (4.0)
|
Self Cross-Site Scripting in Arduino IDE |
arduino |
arduino-ide |
2025-04-02T21:09:16.943Z | 2025-04-03T14:01:53.189Z |
| CVE-2025-32916 |
1 (4.0)
|
Sensitive form data in URL query parameters |
Checkmk GmbH |
Checkmk |
2025-10-09T15:00:58.720Z | 2025-10-14T14:16:57.077Z |
| CVE-2025-3301 |
1 (4.0)
|
DPA Countermeasures Unavailable for Certain Cryptograp… |
silabs.com |
Series 2 SoCs and associated modules |
2025-04-29T13:47:42.717Z | 2025-04-29T14:02:03.494Z |
| CVE-2025-4227 |
1 (4.0)
|
GlobalProtect App: Interception in Endpoint Traffic Po… |
Palo Alto Networks |
GlobalProtect App |
2025-06-13T05:50:52.280Z | 2025-06-23T16:06:55.397Z |
| CVE-2025-43789 |
1 (4.0)
|
JSON Web Services in Liferay Portal 7.4.0 through… |
Liferay |
Portal |
2025-09-12T02:00:54.207Z | 2025-09-12T14:35:03.421Z |
| CVE-2025-49842 |
1 (4.0)
|
conda-forge-webservices Privilege Escalation Risk via … |
conda-forge |
conda-forge-webservices |
2025-06-17T14:02:37.266Z | 2025-06-17T18:15:47.781Z |
| CVE-2025-5009 |
1 (4.0)
|
Information Disclosure in Gemini iOS App |
Google |
Gemini |
2025-10-08T15:31:22.903Z | 2026-01-22T12:33:26.502Z |
| CVE-2025-54515 |
1 (4.0)
|
The Secure Flag passed to Versal™ Adaptive SoC’s … |
AMD |
Versal™ Adaptive SoC Devices |
2025-11-23T17:15:28.948Z | 2025-12-19T03:40:17.492Z |
| CVE-2025-55098 |
1 (4.0)
|
Potential out-of-bounds read in _ux_host_class_audio_d… |
Eclipse Foundation |
USBX |
2025-10-17T05:36:59.542Z | 2025-10-17T14:14:20.773Z |
| CVE-2025-61670 |
1 (4.0)
|
Wasmtime has memory leak in C API with `externref` and… |
bytecodealliance |
wasmtime |
2025-10-07T18:49:53.869Z | 2025-10-07T19:16:40.499Z |
| CVE-2025-64725 |
1 (4.0)
|
Weblate has improper validation upon invitation acceptance |
WeblateOrg |
weblate |
2025-12-15T20:21:06.867Z | 2025-12-15T20:55:54.124Z |
| CVE-2025-7432 |
1 (4.0)
|
DPA countermeasures not reseeded under certain conditions |
silabs.com |
Simplicity SDK |
2026-02-09T16:07:54.943Z | 2026-02-09T16:23:54.517Z |
| CVE-2025-7844 |
1 (4.0)
|
wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmT… |
wolfSSL Inc. |
wolfTPM |
2025-08-04T21:35:04.013Z | 2025-08-05T13:36:36.065Z |
| CVE-2025-8052 |
1 (4.0)
|
HQL Injection vulnerability has been discovered in Ope… |
opentext |
Flipper |
2025-10-20T19:57:34.805Z | 2025-10-21T15:31:49.483Z |
| CVE-2025-8053 |
1 (4.0)
|
Insufficient access control vulnerability has been dis… |
opentext |
Flipper |
2025-10-20T19:55:17.290Z | 2025-10-20T20:11:50.018Z |