Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-78637 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Fdawgs node-poppler Argument Injection index.js pdfUni… |
Fdawgs |
node-poppler |
2026-08-25T04:45:11.359Z | 2026-08-25T04:45:11.359Z |
| CVE-2026-13215 |
6.8 (3.1)
|
Zephyr ext2 mount: unvalidated superblock block size c… |
zephyrproject |
zephyr |
2026-08-25T04:37:21.765Z | 2026-08-25T04:37:21.765Z |
| CVE-2026-13214 |
9.8 (3.1)
|
Stack buffer overflow in OCPP GetConfiguration key parsing |
zephyrproject |
zephyr |
2026-08-25T04:37:20.629Z | 2026-08-25T04:37:20.629Z |
| CVE-2026-12561 |
6.4 (3.1)
|
tagDiv Composer <= 5.4.5 - Authenticated (Contributor+… |
tagDiv |
tagDiv Composer |
2026-08-25T04:27:01.129Z | 2026-08-25T04:27:01.129Z |
| CVE-2026-76063 |
6.4 (3.1)
|
FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stor… |
roxnor |
FundEngine – Donation and Crowdfunding Platform |
2026-08-25T03:27:06.337Z | 2026-08-25T03:27:06.337Z |
| CVE-2026-75930 |
4.3 (3.1)
|
FundEngine <= 1.8.1 - Missing Authorization to Authent… |
roxnor |
FundEngine – Donation and Crowdfunding Platform |
2026-08-25T03:27:05.464Z | 2026-08-25T03:27:05.464Z |
| CVE-2026-19943 |
6.4 (3.1)
|
Gutenverse <= 4.0.2 - Authenticated (Contributor+) Sto… |
jegstudio |
Gutenverse – WordPress Blocks, Page Builder & Site Editor |
2026-08-25T03:27:07.375Z | 2026-08-25T03:27:07.375Z |
| CVE-2026-19892 |
8.8 (3.1)
|
InfusedWoo Pro <= 5.1.18 - Authenticated (Subscriber+)… |
Infused Addons |
InfusedWoo Pro |
2026-08-25T03:27:05.993Z | 2026-08-25T03:27:05.993Z |
| CVE-2026-17089 |
6.1 (3.1)
|
Events Manager <= 7.4.0.1 - Reflected Cross-Site Scrip… |
netweblogic |
Events Manager – Calendar, Bookings, Tickets, and more! |
2026-08-25T03:27:06.684Z | 2026-08-25T03:27:06.684Z |
| CVE-2026-14280 |
6.6 (3.1)
|
Events Manager <= 7.3.7.4 - Authenticated (Administrat… |
netweblogic |
Events Manager – Calendar, Bookings, Tickets, and more! |
2026-08-25T03:27:07.025Z | 2026-08-25T03:27:07.025Z |
| CVE-2026-78685 |
8.8 (3.1)
8.6 (4.0)
|
Le-yan｜Medical Practice Management System - Remote Cod… |
Le-yan |
Medical Practice Management System |
2026-08-25T02:05:09.515Z | 2026-08-25T02:05:09.515Z |
| CVE-2026-75982 |
4.4 (3.1)
|
LearnPress <= 4.4.4 - Missing Authorization to Authent… |
thimpress |
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses |
2026-08-25T02:26:48.639Z | 2026-08-25T02:26:48.639Z |
| CVE-2026-75019 |
6.4 (3.1)
|
Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) S… |
cozythemes |
Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates |
2026-08-25T02:26:49.343Z | 2026-08-25T02:26:49.343Z |
| CVE-2026-10627 |
5.3 (3.1)
|
Events Manager <= 7.4.0 - Missing Authorization to Una… |
netweblogic |
Events Manager – Calendar, Bookings, Tickets, and more! |
2026-08-25T02:26:48.141Z | 2026-08-25T02:26:48.141Z |
| CVE-2025-9878 |
6.4 (3.1)
|
Password Protect WordPress Lite <= 1.9.21 - Authentica… |
buildwps |
PPWP – Password Protect Pages |
2026-08-25T02:26:48.990Z | 2026-08-25T02:26:48.990Z |
| CVE-2026-78683 |
9.4 (4.0)
9.6 (3.1)
|
NLTK before 3.10.0 Remote Code Execution via Unsafe Pi… |
nltk |
nltk |
2026-08-25T01:30:39.451Z | 2026-08-25T01:30:39.451Z |
| CVE-2026-78682 |
8.7 (4.0)
7.5 (3.1)
|
NLTK before 3.10.3 SSRF Protection Bypass via Proxy |
nltk |
nltk |
2026-08-25T01:30:38.486Z | 2026-08-25T01:30:38.486Z |
| CVE-2026-78681 |
8.7 (4.0)
7.5 (3.1)
|
NLTK before 3.10.3 Entity Expansion DoS via ElementTree |
nltk |
nltk |
2026-08-25T01:30:37.749Z | 2026-08-25T01:30:37.749Z |
| CVE-2026-78680 |
8.5 (4.0)
7.8 (3.1)
|
NLTK before 3.10.3 Arbitrary Code Execution via Graphv… |
nltk |
nltk |
2026-08-25T01:30:37.044Z | 2026-08-25T01:30:37.044Z |
| CVE-2026-78679 |
7.1 (4.0)
6.5 (3.1)
|
GitPython before 3.1.59 Arbitrary File Read via TagRef… |
gitpython-developers |
GitPython |
2026-08-25T01:30:36.339Z | 2026-08-25T01:30:36.339Z |
| CVE-2026-78678 |
7.1 (4.0)
6.5 (3.1)
|
GitPython before 3.1.59 Arbitrary File Read via Repo.blame() |
gitpython-developers |
GitPython |
2026-08-25T01:30:35.582Z | 2026-08-25T01:30:35.582Z |
| CVE-2026-78677 |
8.7 (4.0)
7.5 (3.1)
|
GitPython before 3.1.59 Path Traversal via separate-git-dir |
gitpython-developers |
GitPython |
2026-08-25T01:30:34.719Z | 2026-08-25T01:30:34.719Z |
| CVE-2026-78676 |
9.3 (4.0)
9.8 (3.1)
|
GitPython before 3.1.59 Remote Code Execution via Conf… |
gitpython-developers |
GitPython |
2026-08-25T01:30:33.754Z | 2026-08-25T01:30:33.754Z |
| CVE-2026-78675 |
8.6 (4.0)
8.4 (3.1)
|
GitPython before 3.1.59 Local File Content Disclosure … |
gitpython-developers |
GitPython |
2026-08-25T01:30:32.739Z | 2026-08-25T01:30:32.739Z |
| CVE-2026-76846 |
8.7 (4.0)
7.5 (3.1)
|
Grav before 2.0.16 Information Disclosure via Twig Sandbox |
getgrav |
grav |
2026-08-25T01:30:31.891Z | 2026-08-25T01:30:31.891Z |
| CVE-2026-76839 |
8.7 (4.0)
6.5 (3.1)
|
Grav before 2.0.16 Information Disclosure via offsetGet |
getgrav |
grav |
2026-08-25T01:30:31.050Z | 2026-08-25T01:30:31.050Z |
| CVE-2026-75575 |
6.9 (4.0)
5.3 (3.1)
|
Rocket.Chat Missing DDP Rate Limit on the sendForgotPa… |
RocketChat |
Rocket.Chat |
2026-08-25T01:30:29.898Z | 2026-08-25T01:30:29.898Z |
| CVE-2026-75574 |
8.7 (4.0)
8.8 (3.1)
|
Grav before 4.2.2 Remote Code Execution via Email Twig |
getgrav |
grav |
2026-08-25T01:30:26.910Z | 2026-08-25T01:30:26.910Z |
| CVE-2026-72702 |
9.3 (4.0)
5.4 (3.1)
|
Grav CMS before 2.0.16 Origin Validation Bypass via Referer |
getgrav |
grav |
2026-08-25T01:30:25.032Z | 2026-08-25T01:30:25.032Z |
| CVE-2026-72701 |
6.3 (4.0)
3.7 (3.1)
|
Grav CMS before 2.0.16 Timing Attack via verifyNonce |
getgrav |
grav |
2026-08-25T01:30:23.965Z | 2026-08-25T01:30:23.965Z |