Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vxhj-7whr-2q55 |
6.4 (3.1)
|
The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored Cross-Site Scripti… | 2026-09-10T03:30:21Z | 2026-09-10T03:30:21Z |
| ghsa-m8m7-h57q-j2f3 |
6.5 (3.1)
8.5 (4.0)
|
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous … | 2026-09-10T03:30:21Z | 2026-09-10T03:30:21Z |
| ghsa-52wr-g3vp-7h6v |
7.7 (3.1)
|
Velociraptor allows for the creation of notebook backups in its default enabled daily backup featur… | 2026-09-10T03:30:21Z | 2026-09-10T03:30:21Z |
| ghsa-22m5-jm3v-fxq8 |
4.3 (3.1)
5.3 (4.0)
|
BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user-controlle… | 2026-09-10T03:30:21Z | 2026-09-10T03:30:21Z |
| ghsa-jfjq-fc5j-227m |
9.9 (3.1)
|
Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, th… | 2026-09-10T03:30:20Z | 2026-09-10T03:30:20Z |
| ghsa-fh47-jv9w-x723 |
9.8 (3.1)
|
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary F… | 2026-09-10T03:30:20Z | 2026-09-10T03:30:20Z |
| ghsa-7jcg-95pj-h5fp |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJ… | 2026-09-10T03:30:20Z | 2026-09-10T03:30:20Z |
| ghsa-w246-x8qv-r8f5 |
6.0 (4.0)
|
The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the l… | 2026-08-18T15:31:45Z | 2026-09-10T03:30:19Z |
| ghsa-ph6c-2pxw-cvfg |
4.3 (3.1)
2.1 (4.0)
|
A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-jp98-64m5-6c94 |
6.5 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-jgf4-gc7v-8wx2 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5d… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-g6hw-3r4r-q8pw |
4.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-g437-q4fp-pq2g |
9.3 (4.0)
|
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-cc37-h9x3-vxxm |
9.6 (3.1)
8.6 (4.0)
|
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearab… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-6jp9-67v9-qq6p |
|
Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-s… | 2026-09-10T00:30:28Z | 2026-09-10T00:30:28Z |
| ghsa-wvvf-rj6j-5fcw |
|
yshopmall <=3.3 is vulnerable to Cross Site Scripting (XSS). The file upload endpoint /api/upload o… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-rv64-rv32-9xg6 |
|
In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskContro… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-jrpr-987w-vfxw |
|
zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) via SVG file upload through the /equip… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-gvv2-7gf7-286x |
|
An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticate… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-93h7-x9h6-vfvp |
7.7 (3.1)
|
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fo… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-7h85-frp3-m64f |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-27rv-5mrj-28wh |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b… | 2026-09-10T00:30:27Z | 2026-09-10T00:30:27Z |
| ghsa-rv8x-7xr2-hmqm |
8.8 (3.1)
|
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2… | 2026-08-11T18:30:47Z | 2026-09-10T00:30:26Z |
| ghsa-3cgp-3cqx-j8w2 |
6.5 (3.1)
|
Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree | 2026-09-09T23:54:22Z | 2026-09-09T23:54:22Z |
| ghsa-5x7x-4c3c-qf5w |
5.0 (3.1)
|
Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets | 2026-09-09T23:54:08Z | 2026-09-09T23:54:08Z |
| ghsa-jqhh-cjmq-vmv6 |
6.5 (3.1)
|
Open WebUI: Any authenticated user can hang the server via a cyclic chat message history | 2026-09-09T23:53:59Z | 2026-09-09T23:53:59Z |
| ghsa-wprj-9cvc-5w37 |
7.5 (3.1)
|
AVideo: Unauthenticated Access to Payment Log DataTables Endpoints Exposes Transaction Data, PayPal… | 2026-03-29T15:40:52Z | 2026-09-09T23:53:42Z |
| ghsa-rg7q-4223-phjw |
7.5 (3.1)
8.7 (4.0)
|
Duplicate Advisory: AVideo: Unauthenticated Access to Payment Log DataTables Endpoints Exposes Tran… | 2026-06-20T21:31:21Z | 2026-09-09T23:53:20Z |
| ghsa-cp3j-m783-3ph5 |
8.5 (3.1)
|
Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's wo… | 2026-09-09T23:52:14Z | 2026-09-09T23:52:14Z |
| ghsa-g72f-jw3w-mgh7 |
8.3 (3.1)
|
@openhop/server: Path Traversal in Flow ID File Operations | 2026-09-09T23:51:59Z | 2026-09-09T23:51:59Z |