Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 84 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-93436 |
8.7 (4.0)
7.5 (3.1)
|
vLLM through 0.29.0 Memory Exhaustion via Rejected Requests |
vllm-project |
vllm |
2026-09-17T22:15:31.977Z | 2026-09-17T22:15:31.977Z |
| CVE-2026-93435 |
8.7 (4.0)
7.5 (3.1)
|
redis-parser through 3.0.0 Denial of Service via Unbou… |
NodeRedis |
redis-parser |
2026-09-17T22:15:31.338Z | 2026-09-17T22:15:31.338Z |
| CVE-2026-54645 |
4.8 (3.1)
|
CubeCart: Stored XSS in Product Description Editor via… |
cubecart |
v6 |
2026-09-17T22:06:28.646Z | 2026-09-17T22:06:28.646Z |
| CVE-2026-54643 |
5.4 (3.1)
|
CubeCart: Missing Authorization Check for Order Note D… |
cubecart |
v6 |
2026-09-17T22:05:28.592Z | 2026-09-17T22:05:28.592Z |
| CVE-2026-54642 |
5.3 (4.0)
|
CubeCart: CSRF Protection Missing for Download Resets … |
cubecart |
v6 |
2026-09-17T22:04:40.280Z | 2026-09-17T22:04:40.280Z |
| CVE-2026-54644 |
6.1 (3.1)
|
CubeCart: XSS via Anchor Tag Attribute Injection in gu… |
cubecart |
v6 |
2026-09-17T22:03:41.767Z | 2026-09-17T22:03:41.767Z |
| CVE-2026-54647 |
7.2 (3.1)
|
CubeCart : SQL Injection via download_expire Parameter… |
cubecart |
v6 |
2026-09-17T22:02:48.395Z | 2026-09-17T22:02:48.395Z |
| CVE-2026-54646 |
7.2 (3.1)
|
CubeCart: SQL Identifier Injection via Backtick Bypass… |
cubecart |
v6 |
2026-09-17T22:01:53.897Z | 2026-09-17T22:01:53.897Z |
| CVE-2026-54648 |
6.5 (3.1)
|
CubeCart: Missing Authorization Check in customers.gdp… |
cubecart |
v6 |
2026-09-17T22:01:04.521Z | 2026-09-17T22:01:04.521Z |
| CVE-2026-54734 |
10 (3.1)
|
Prebid Server Java: Vulnerability to request forgery a… |
prebid |
prebid-server-java |
2026-09-17T21:59:45.873Z | 2026-09-17T21:59:45.873Z |
| CVE-2026-54519 |
8.8 (3.1)
|
AI Agent Automation: Missing ownership checks in memor… |
vmDeshpande |
ai-agent-automation |
2026-09-17T21:58:41.375Z | 2026-09-17T21:58:41.375Z |
| CVE-2026-86688 |
7.4 (4.0)
|
Session id is not renewed on authentication in ash_aut… |
team-alembic |
ash_authentication |
2026-09-17T21:58:00.853Z | 2026-09-17T21:58:00.853Z |
| CVE-2026-76949 |
9.1 (4.0)
|
Remember-me sign-in guard reads a session key that is … |
team-alembic |
ash_authentication |
2026-09-17T21:57:50.146Z | 2026-09-17T21:57:50.146Z |
| CVE-2026-54520 |
8.1 (3.1)
|
AI Agent Automation: Workflow file step path traversal… |
vmDeshpande |
ai-agent-automation |
2026-09-17T21:57:39.051Z | 2026-09-17T21:57:39.051Z |
| CVE-2026-54767 |
9.1 (3.1)
|
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destr… |
LabRedesCefetRJ |
WeGIA |
2026-09-17T21:56:28.590Z | 2026-09-17T21:56:28.590Z |
| CVE-2026-54671 |
8.8 (3.1)
|
WeGIA: Authorization Bypass via Empty Resource Array i… |
LabRedesCefetRJ |
WeGIA |
2026-09-17T21:55:39.003Z | 2026-09-17T21:55:39.003Z |
| CVE-2026-54670 |
9.1 (3.1)
|
WeGIA: Unauthenticated Auth Bypass + Local File Inclusion |
LabRedesCefetRJ |
WeGIA |
2026-09-17T21:54:43.078Z | 2026-09-17T21:54:43.078Z |
| CVE-2026-54634 |
7.3 (3.1)
|
Hamlib: rigctld `send_raw` Stack Out-of-Bounds Write a… |
Hamlib |
Hamlib |
2026-09-17T21:52:51.132Z | 2026-09-17T21:52:51.132Z |
| CVE-2026-54608 |
7.1 (4.0)
|
MythicalDash: Unauthenticated payment bypass in Stripe… |
MythicalLTD |
MythicalDash |
2026-09-17T21:48:39.201Z | 2026-09-17T21:48:39.201Z |
| CVE-2026-54506 |
7.6 (3.1)
|
Vvveb: Stored XSS via sanitizeHTML() bypass in user pr… |
givanz |
Vvveb |
2026-09-17T21:47:20.530Z | 2026-09-17T21:47:20.530Z |
| CVE-2026-54612 |
8.8 (3.1)
|
Vvveb: Authenticated editor path traversal to PHP file… |
givanz |
Vvveb |
2026-09-17T21:46:27.346Z | 2026-09-17T21:46:27.346Z |
| CVE-2026-54613 |
5.4 (3.1)
|
Vvveb: Path Traversal in Revision Backup Reader/Delete… |
givanz |
Vvveb |
2026-09-17T21:45:32.239Z | 2026-09-17T21:45:32.239Z |
| CVE-2026-93307 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
O-RAN-SC SMO OAM VES Collector memory allocation |
O-RAN-SC |
SMO OAM |
2026-09-17T21:45:10.125Z | 2026-09-17T21:45:10.125Z |
| CVE-2026-54507 |
8.4 (4.0)
|
Vvveb oEmbedProxy vulnerable to server-side request forgery |
givanz |
Vvveb |
2026-09-17T21:44:47.699Z | 2026-09-17T21:44:47.699Z |
| CVE-2026-50158 |
7.7 (3.1)
|
yutu: Arbitrary File Write via MCP `caption-download` Tool |
eat-pray-ai |
yutu |
2026-09-17T21:43:49.806Z | 2026-09-17T21:43:49.806Z |
| CVE-2026-53534 |
7.5 (4.0)
|
JabRef CAYW Sublime Text integration permits operating… |
JabRef |
jabref |
2026-09-17T21:42:47.446Z | 2026-09-17T21:42:47.446Z |
| CVE-2026-53557 |
7.7 (4.0)
|
SQLBot: Second-Order SQL Injection via Excel Datasourc… |
dataease |
SQLBot |
2026-09-17T21:41:45.155Z | 2026-09-17T21:41:45.155Z |
| CVE-2026-53555 |
5.1 (4.0)
|
Stored XSS via SVG Upload |
dataease |
SQLBot |
2026-09-17T21:40:48.271Z | 2026-09-17T21:40:48.271Z |
| CVE-2026-53556 |
6 (4.0)
|
SQLBot: Authenticated SQL Injection in previewData Res… |
dataease |
SQLBot |
2026-09-17T21:39:44.056Z | 2026-09-17T21:39:44.056Z |
| CVE-2026-53554 |
7.3 (4.0)
|
SQLBot: Arbitrary File Write via parseExcel Leading to… |
dataease |
SQLBot |
2026-09-17T21:38:37.353Z | 2026-09-17T21:38:37.353Z |