Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p2v8-4c4f-rwpq |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX a… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-jc8j-9799-c943 |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware … | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-7983-35fr-8qwm |
4.3 (3.1)
|
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-5xcx-3qx2-qv4x |
7.5 (3.1)
8.7 (4.0)
|
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer w… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-34g6-m4cp-w5c9 |
7.1 (3.1)
7.1 (4.0)
|
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-2g48-2hgv-5jpv |
|
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to a… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-r6m9-hrqm-hx9h |
5.3 (3.1)
6.3 (4.0)
|
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-p2j9-4mg8-mm73 |
4.3 (3.1)
5.3 (4.0)
|
Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /e… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-mqq7-j9mq-9jwq |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-jphx-q7f7-4x8r |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subti… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-j6x3-f5cf-2pg4 |
8.8 (3.1)
8.7 (4.0)
|
Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulner… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-p5gf-3w86-63p3 |
9.1 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-9hp2-rmjj-5mmh |
6.1 (3.1)
5.3 (4.0)
|
Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows … | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-97wp-7vj5-mrg2 |
6.0 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Inf… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-8j96-7wgg-9348 |
6.7 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-7fmf-3wmg-8gc9 |
8.8 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Se… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-468h-f89p-mhw3 |
7.2 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-223h-642r-2f6v |
6.8 (3.1)
|
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand functio… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-rr2p-3q6v-qr2f |
7.8 (3.1)
8.5 (4.0)
|
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before … | 2026-07-22T18:32:37Z | 2026-07-22T18:32:37Z |
| ghsa-3wx7-p748-wxww |
9.1 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:37Z | 2026-07-22T18:32:37Z |
| ghsa-49p9-fpjh-rwcr |
9.8 (3.1)
9.3 (4.0)
|
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before … | 2026-07-22T18:32:36Z | 2026-07-22T18:32:36Z |
| ghsa-h639-9h3v-cf49 |
6.3 (3.1)
|
A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes … | 2026-07-22T18:32:35Z | 2026-07-22T18:32:35Z |
| ghsa-9r8p-h6cc-6qhm |
5.1 (4.0)
|
n8n: Google Service Account Private Key Exposed in JWT Header | 2026-07-22T18:00:09Z | 2026-07-22T18:00:09Z |
| ghsa-9wcp-9r3j-383q |
8.4 (4.0)
|
n8n: Stored DOM XSS via Resource Locator `cachedResultUrl` | 2026-07-22T17:59:07Z | 2026-07-22T17:59:07Z |
| ghsa-p3rg-hrf9-w9gj |
8.2 (4.0)
|
n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview | 2026-07-22T17:57:14Z | 2026-07-22T17:57:15Z |
| ghsa-g3r5-9h93-4j2c |
8.9 (4.0)
|
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution | 2026-07-22T17:56:35Z | 2026-07-22T17:56:35Z |
| ghsa-x5vx-c2c8-m3w9 |
7.2 (4.0)
|
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool | 2026-07-22T17:55:55Z | 2026-07-22T17:55:55Z |
| ghsa-wm9c-mg5f-4mpg |
9.8 (3.1)
|
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability … | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-qhh7-j7w3-xfxq |
7.5 (3.1)
|
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always val… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |
| ghsa-jh99-mm75-xrmv |
7.5 (3.1)
|
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Por… | 2026-07-22T15:31:26Z | 2026-07-22T15:31:26Z |