Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20042 |
9.3 (4.0)
|
DJI Drone FTP Service Allows Unrestricted Storage Cons… |
DJI |
Neo |
2026-08-24T07:01:00.000Z | 2026-08-27T16:22:40.055465Z |
| GCVE-1-2026-20121 |
6.9 (4.0)
|
Flowintel Login Email Validation Bypass Allows Log Inj… |
flowintel |
flowintel |
2026-08-27T13:36:08.933528Z | 2026-08-27T13:36:17.105936Z |
| GCVE-1-2026-20200 |
9.1 (4.0)
|
Flowintel Fails to Invalidate Active Sessions After Pa… |
flowintel |
flowintel |
2026-08-27T13:32:37.993094Z | 2026-08-27T13:32:44.650130Z |
| GCVE-1-2026-20207 |
5.1 (4.0)
|
Flowintel HTML Injection in MISP Case History Timeline… |
flowintel |
flowintel |
2026-08-27T13:24:58.362704Z | 2026-08-27T13:25:06.949370Z |
| GCVE-1-2026-20133 |
5.3 (4.0)
|
Flowintel Missing Authorization Allows Regular API Use… |
flowintel |
flowintel |
2026-08-27T13:20:19.140044Z | 2026-08-27T13:20:35.102328Z |
| GCVE-1-2026-20005 |
8.6 (4.0)
|
Flowintel Organization Administrator Can Reset Full Ad… |
flowintel |
flowintel |
2026-08-27T13:14:13.262903Z | 2026-08-27T13:14:18.765357Z |
| GCVE-1-2026-20210 |
7.2 (4.0)
|
Flowintel Missing Task-to-Case Authorization Allows Cr… |
flowintel |
flowintel |
2026-08-27T13:10:19.700682Z | 2026-08-27T13:10:27.980145Z |
| GCVE-1-2026-20217 |
5.1 (4.0)
|
Flowintel Stored XSS in Calendar via Malicious Case Title |
flowintel |
flowintel |
2026-08-27T12:48:30.757073Z | 2026-08-27T12:48:37.357461Z |
| GCVE-1-2026-20128 |
5.1 (4.0)
|
Flowintel Stored XSS in Case Notes via Malicious Merma… |
flowintel |
flowintel |
2026-08-27T12:06:10.627894Z | 2026-08-27T12:06:16.546557Z |
| GCVE-1-2026-20144 |
7.5 (4.0)
|
Flowintel Arbitrary Log File Path Allows Remote Code E… |
flowintel |
flowintel |
2026-08-27T11:59:40.894192Z | 2026-08-27T11:59:48.661344Z |
| GCVE-1-2026-20176 |
8.6 (4.0)
|
Flowintel Alert Settings Configuration Allows Remote C… |
flowintel |
flowintel |
2026-08-27T10:22:00.000Z | 2026-08-27T11:29:57.274409Z |
| GCVE-1-2026-20195 |
7.1 (4.0)
|
Flowintel Note PDF Export Allows Arbitrary Local File … |
flowintel |
flowintel |
2026-08-27T10:04:00.000Z | 2026-08-27T10:07:15.223090Z |
| GCVE-1-2026-20107 |
9.4 (4.0)
|
RansomLook API Key Disclosure Through /admin/apikeys H… |
ransomlook |
ransomlook |
2026-08-24T19:38:00.000Z | 2026-08-24T19:51:28.195854Z |
| GCVE-1-2026-20145 |
7 (4.0)
|
Insecure Flask Secret-Key File Permissions Allow Local… |
ransomlook |
ransomlook |
2026-08-24T19:28:37.558610Z | 2026-08-24T19:28:46.627760Z |
| GCVE-1-2026-20086 |
8.8 (4.0)
|
RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:19:50.807894Z | 2026-08-24T19:19:59.130934Z |
| GCVE-1-2026-20148 |
8.8 (4.0)
|
Stored Cross-Site Scripting via Untrusted Cryptocurren… |
ransomlook |
ransomlook |
2026-08-24T14:13:04.261321Z | 2026-08-24T14:13:17.001464Z |
| GCVE-1-2026-20150 |
9.4 (4.0)
|
RansomLook Missing Authorization in Web Configuration … |
ransomlook |
ransomlook |
2026-08-24T14:03:49.792546Z | 2026-08-24T14:04:08.948852Z |
| GCVE-1-2026-20173 |
8.7 (4.0)
|
Unauthenticated Disclosure of Scraping Credentials and… |
ransomlook |
ransomlook |
2026-08-24T13:55:40.557228Z | 2026-08-24T13:55:50.929761Z |
| GCVE-1-2026-20097 |
8.2 (4.0)
|
RansomLook Analysis PDF Generation Allows Server-Side … |
ransomlook |
ransomlook |
2026-08-24T13:49:30.334868Z | 2026-08-24T13:49:43.468021Z |
| GCVE-1-2026-20073 |
8.2 (4.0)
|
RansomLook Arbitrary File Read via Path Traversal in P… |
ransomlook |
ransomlook |
2026-08-24T13:31:44.429290Z | 2026-08-24T13:31:59.815590Z |
| GCVE-1-2026-20166 |
8.7 (4.0)
|
Private Group and Market Posts Disclosed Through Publi… |
ransomlook |
ransomlook |
2026-08-24T13:26:41.992725Z | 2026-08-24T13:26:52.078718Z |
| GCVE-1-2026-20188 |
6.9 (4.0)
|
Redis Glob Pattern Injection Allows Unauthorized Enume… |
ransomlook |
ransomlook |
2026-08-24T13:18:00.000Z | 2026-08-24T13:18:54.707851Z |
| GCVE-1-2026-20137 |
9.2 (4.0)
|
RansomLook Missing Authorization Allows Disclosure of … |
ransomlook |
ransomlook |
2026-08-24T13:09:11.020129Z | 2026-08-24T13:09:20.280924Z |
| GCVE-1-2026-20050 |
9.2 (4.0)
|
RansomLook Unauthenticated Database Export Exposes Pri… |
ransomlook |
ransomlook |
2026-08-24T13:03:04.849291Z | 2026-08-24T13:03:20.979300Z |
| GCVE-1-2026-20060 |
8.8 (4.0)
|
Missing Authentication Allows Unauthorized Creation of… |
ransomlook |
ransomlook |
2026-08-24T12:57:38.826361Z | 2026-08-24T12:57:54.973935Z |
| GCVE-1-2026-20208 |
9.3 (4.0)
10 (4.0)
|
Switch RG-ES208GC - Reyee - Ruijie equipments |
Ruijie |
Reyee RG-ES208GC |
2026-08-24T09:14:00.000Z | 2026-08-24T10:23:30.515440Z |
| GCVE-1-2026-20096 |
6 (4.0)
|
DJI Drone HTTP Media Server Denial of Service via Conn… |
DJI |
Neo |
2026-08-24T08:45:47.214204Z | 2026-08-24T08:46:02.937720Z |
| GCVE-1-2026-20018 |
8.5 (4.0)
|
DJI Drone Bluetooth Interface Unauthenticated DUML Com… |
DJI |
Neo |
2026-08-24T08:05:43.611260Z | 2026-08-24T08:07:50.237035Z |
| GCVE-1-2026-20157 |
9.4 (4.0)
|
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE |
DJI |
Neo |
2026-08-21T14:06:00.000Z | 2026-08-24T07:28:26.616826Z |
| GCVE-1-2026-20169 |
8.7 (4.0)
|
DJI Drone HTTP Media Server Allows Unauthenticated Acc… |
DJI |
Neo |
2026-08-24T07:23:00.946991Z | 2026-08-24T07:25:18.426734Z |