Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-9804 |
7.7 (3.1)
|
Kubevirt: kubevirt: vmexport directory symlink escape … |
Red Hat |
Red Hat Container Native Virtualization 4.17 |
2026-05-28T08:15:39.779Z | 2026-08-24T12:06:53.766Z |
| CVE-2026-9697 |
7.4 (3.1)
|
undici vulnerable to TLS certificate validation bypass… |
undici |
undici |
2026-06-17T16:46:42.706Z | 2026-08-24T12:07:01.659Z |
| CVE-2026-9277 |
8.1 (3.1)
9.2 (4.0)
|
shell-quote `quote()` does not validate object-token s… |
|
shell-quote |
2026-05-22T13:22:38.873Z | 2026-08-24T12:06:56.916Z |
| CVE-2026-8643 |
4.1 (4.0)
8 (3.1)
|
pip can extract console_scripts and gui_scripts outsid… |
Python Packaging Authority |
pip |
2026-06-01T15:01:32.143Z | 2026-08-24T12:06:49.451Z |
| CVE-2026-8177 |
7.5 (3.1)
|
XML::LibXML versions through 2.0210 for Perl read out-… |
SHLOMIF |
XML::LibXML |
2026-05-10T20:48:51.816Z | 2026-08-24T12:06:48.214Z |
| CVE-2026-7374 |
9.9 (3.1)
|
Kubevirt: kubevirt virt-handler: privilege escalation … |
Red Hat |
Red Hat Container Native Virtualization 4.12 |
2026-05-26T13:14:53.851Z | 2026-08-24T12:07:02.287Z |
| CVE-2026-7163 |
6.1 (3.1)
|
Assisted-service: assisted-service: authenticated user… |
Red Hat |
multicluster engine for Kubernetes 2.1 |
2026-04-30T13:18:49.088Z | 2026-08-24T12:06:59.510Z |
| CVE-2026-78365 |
9.3 (4.0)
|
IDOR and missing authorization in Prospero Flow CRM su… |
Roskus |
Prospero Flow CRM |
2026-08-24T12:49:36.802Z | 2026-08-24T13:01:26.201Z |
| CVE-2026-78321 |
6 (4.0)
|
DJI Drone HTTP Media Server Denial of Service via Conn… |
DJI |
Neo |
2026-08-24T08:47:11.796Z | 2026-08-24T12:51:11.340Z |
| CVE-2026-78306 |
8.5 (4.0)
|
DJI Drone Bluetooth Interface Unauthenticated DUML Com… |
DJI |
Neo |
2026-08-24T08:08:00.485Z | 2026-08-24T12:51:11.501Z |
| CVE-2026-78291 |
5.3 (3.1)
|
WordPress RepairBuddy plugin <= 4.1223 - Broken Access… |
Webful Creations |
RepairBuddy |
2026-08-24T11:39:33.406Z | 2026-08-24T12:51:11.182Z |
| CVE-2026-78290 |
6.5 (3.1)
|
WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site… |
ThemeGrill |
Magazine Blocks |
2026-08-24T11:39:41.909Z | 2026-08-24T12:51:09.915Z |
| CVE-2026-78280 |
4.3 (3.1)
|
WordPress Hash Form plugin <= 1.4.0 - Cross Site Reque… |
HashThemes |
Hash Form |
2026-08-24T11:39:41.194Z | 2026-08-24T12:51:10.074Z |
| CVE-2026-78279 |
5.4 (3.1)
|
WordPress Fluent Support Pro plugin <= 2.3.1 - Cross S… |
WP ManageNinja LLC |
Fluent Support Pro |
2026-08-24T11:39:40.482Z | 2026-08-24T12:51:10.228Z |
| CVE-2026-78278 |
5.3 (3.1)
|
WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecur… |
WP ManageNinja LLC |
Fluent Boards Pro |
2026-08-24T11:39:39.768Z | 2026-08-24T12:51:10.381Z |
| CVE-2026-78277 |
4.9 (3.1)
|
WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side… |
WP ManageNinja LLC |
FluentCRM Pro |
2026-08-24T11:39:39.066Z | 2026-08-24T12:51:10.534Z |
| CVE-2026-78272 |
5.4 (3.1)
|
WordPress Fluent Support Pro plugin <= 2.3.1 - Broken … |
WP ManageNinja LLC |
Fluent Support Pro |
2026-08-24T11:39:38.361Z | 2026-08-24T12:51:10.682Z |
| CVE-2026-78270 |
7.6 (3.1)
|
WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injecti… |
WP ManageNinja LLC |
FluentCRM Pro |
2026-08-24T11:39:37.644Z | 2026-08-24T12:51:10.833Z |
| CVE-2026-78247 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-24T12:45:09.910Z | 2026-08-24T12:45:09.910Z |
| CVE-2026-78211 |
9.8 (3.1)
9.3 (4.0)
|
4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Comm… |
4MOSAn Security Technology |
4MOSAn GCB Doctor |
2026-08-24T03:32:54.804Z | 2026-08-24T12:51:11.649Z |
| CVE-2026-73570 |
8.9 (3.1)
|
A remote code execution vulnerability exists in Z… |
Zimbra |
Collaboration |
2026-08-13T15:19:42.195Z | 2026-08-24T12:17:51.837Z |
| CVE-2026-72693 |
7.8 (3.1)
|
Kbd: local privilege escalation in openvt via incorrec… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-11T08:39:24.983Z | 2026-08-24T12:46:21.046Z |
| CVE-2026-6893 |
7.5 (3.1)
|
Dracut: dracut: root code execution via dhcp options c… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-06-10T19:49:27.553Z | 2026-08-24T12:07:01.250Z |
| CVE-2026-6734 |
7.5 (3.1)
|
undici vulnerable to cross-origin request routing via … |
undici |
undici |
2026-06-17T16:36:55.439Z | 2026-08-24T12:06:56.294Z |
| CVE-2026-6322 |
7.5 (3.1)
|
fast-uri vulnerable to host confusion via percent-enco… |
fast-uri |
fast-uri |
2026-05-05T10:29:16.378Z | 2026-08-24T12:06:56.895Z |
| CVE-2026-6321 |
7.5 (3.1)
|
fast-uri vulnerable to path traversal via percent-enco… |
fast-uri |
fast-uri |
2026-05-04T19:31:57.253Z | 2026-08-24T12:06:49.701Z |
| CVE-2026-69555 |
10 (3.1)
|
Azure Arc Elevation of Privilege Vulnerability |
Microsoft |
Azure ARC |
2026-08-20T21:47:11.349Z | 2026-08-24T12:21:16.499Z |
| CVE-2026-66671 |
8.1 (3.1)
|
WordPress Verdure Core plugin <= 1.2 - Local File Incl… |
Elated-Themes |
Verdure Core |
2026-08-24T11:54:43.488Z | 2026-08-24T12:51:09.760Z |
| CVE-2026-66670 |
8.1 (3.1)
|
WordPress Måne theme <= 1.7 - Local File Inclusion vul… |
Elated-Themes |
Måne |
2026-08-24T11:54:58.853Z | 2026-08-24T12:51:05.899Z |
| CVE-2026-66650 |
9.8 (3.1)
|
WordPress FreightCo theme <= 1.1.15 - PHP Object Injec… |
Theme-Rex |
FreightCo |
2026-08-24T11:54:58.146Z | 2026-08-24T12:51:06.094Z |