Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p2v8-4c4f-rwpq |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX a… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-jc8j-9799-c943 |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware … | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-7983-35fr-8qwm |
4.3 (3.1)
|
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-5xcx-3qx2-qv4x |
7.5 (3.1)
8.7 (4.0)
|
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer w… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-34g6-m4cp-w5c9 |
7.1 (3.1)
7.1 (4.0)
|
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-2g48-2hgv-5jpv |
|
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to a… | 2026-07-22T18:32:40Z | 2026-07-22T18:32:40Z |
| ghsa-r6m9-hrqm-hx9h |
5.3 (3.1)
6.3 (4.0)
|
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-p2j9-4mg8-mm73 |
4.3 (3.1)
5.3 (4.0)
|
Graylog2 Server before commit 46a2eeb contains a missing per-entity permission check in the POST /e… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-mqq7-j9mq-9jwq |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-jphx-q7f7-4x8r |
8.8 (3.1)
8.7 (4.0)
|
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subti… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-j6x3-f5cf-2pg4 |
8.8 (3.1)
8.7 (4.0)
|
Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulner… | 2026-07-22T18:32:39Z | 2026-07-22T18:32:39Z |
| ghsa-9hp2-rmjj-5mmh |
6.1 (3.1)
5.3 (4.0)
|
Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows … | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-7fmf-3wmg-8gc9 |
8.8 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Se… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-223h-642r-2f6v |
6.8 (3.1)
|
A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand functio… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:39Z |
| ghsa-p5gf-3w86-63p3 |
9.1 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-97wp-7vj5-mrg2 |
6.0 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Inf… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-8j96-7wgg-9348 |
6.7 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-468h-f89p-mhw3 |
7.2 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:38Z | 2026-07-22T18:32:38Z |
| ghsa-rr2p-3q6v-qr2f |
7.8 (3.1)
8.5 (4.0)
|
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before … | 2026-07-22T18:32:37Z | 2026-07-22T18:32:37Z |
| ghsa-3wx7-p748-wxww |
9.1 (3.1)
|
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation… | 2026-07-22T18:32:37Z | 2026-07-22T18:32:37Z |
| ghsa-49p9-fpjh-rwcr |
9.8 (3.1)
9.3 (4.0)
|
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before … | 2026-07-22T18:32:36Z | 2026-07-22T18:32:36Z |
| ghsa-h639-9h3v-cf49 |
6.3 (3.1)
|
A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes … | 2026-07-22T18:32:35Z | 2026-07-22T18:32:35Z |
| ghsa-4m7v-hj47-rqcr |
5.3 (3.1)
|
The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bo… | 2026-07-22T09:32:13Z | 2026-07-22T18:32:33Z |
| ghsa-xvh6-vcqc-vqqv |
9.8 (3.1)
|
SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via th… | 2026-07-21T21:32:42Z | 2026-07-22T18:32:29Z |
| ghsa-vcgq-93c9-35cm |
8.1 (3.1)
|
Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker t… | 2026-07-21T21:32:40Z | 2026-07-22T18:32:29Z |
| ghsa-rvg3-536c-h334 |
9.8 (3.1)
|
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via … | 2026-07-21T21:32:42Z | 2026-07-22T18:32:29Z |
| ghsa-m3wq-h7w9-mp4r |
9.8 (3.1)
|
An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-1… | 2026-07-21T21:32:41Z | 2026-07-22T18:32:29Z |
| ghsa-grff-w2hj-96cj |
6.1 (3.1)
|
Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive… | 2026-07-21T21:32:42Z | 2026-07-22T18:32:29Z |
| ghsa-g26r-j63r-r2w8 |
7.5 (3.1)
|
An issue in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the JobUt… | 2026-07-21T21:32:42Z | 2026-07-22T18:32:29Z |
| ghsa-f2q9-hhmf-6hfh |
9.8 (3.1)
|
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via … | 2026-07-21T21:32:42Z | 2026-07-22T18:32:29Z |