Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-v36p-vv44-8qfg |
7.5 (3.1)
8.7 (4.0)
|
zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirec… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-mwq5-v3w5-qr6v |
7.7 (3.1)
7.0 (4.0)
|
zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel an… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-hxq7-w32x-hwx5 |
5.3 (3.1)
6.9 (4.0)
|
IP2Location Country Blocker plugin for WordPress before 2.45.0 contains an access control bypass vu… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-cm3p-487m-cmvq |
8.2 (3.1)
8.8 (4.0)
|
zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-c2gw-4533-c2w3 |
6.9 (4.0)
|
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-9p7w-x2w6-p34j |
7.7 (3.1)
7.0 (4.0)
|
zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a … | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-4f4c-f6w3-8rrm |
5.3 (3.1)
|
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to … | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-32f6-mgwr-pvc4 |
7.5 (3.1)
8.7 (4.0)
|
t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in Merging… | 2026-09-09T15:35:16Z | 2026-09-09T15:35:16Z |
| ghsa-wrcx-2wr4-qp8m |
3.7 (3.1)
|
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to … | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-hcw2-96q3-mpqg |
5.5 (3.1)
|
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to … | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-h5q7-w9w4-9hcf |
8.6 (3.1)
8.8 (4.0)
|
knowns (npm package) versions <= 0.29.1 contain a path traversal vulnerability in the Document API.… | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-cr98-vvwf-97rx |
7.2 (3.1)
8.6 (4.0)
|
Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vuln… | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-9gq6-686x-r39m |
3.7 (3.1)
|
Dell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper… | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-8748-853v-5rpj |
3.7 (3.1)
|
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to … | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-5xxp-v8f7-fgqp |
3.7 (3.1)
|
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to … | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-43f9-jpwj-c3c2 |
6.3 (3.1)
5.3 (4.0)
|
Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy wh… | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-3584-rwvv-wp47 |
7.1 (3.1)
|
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Tech… | 2026-09-09T15:35:15Z | 2026-09-09T15:35:15Z |
| ghsa-vp3x-c2h8-v6w8 |
8.1 (3.1)
8.6 (4.0)
|
Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allow… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-vf76-xm6x-r4hv |
7.6 (3.1)
8.3 (4.0)
|
Snipe-IT versions before 8.7.0 fail to HTML-escape the employee_num field in the acceptance PDF gen… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-v46g-h6c9-wpq3 |
6.5 (3.1)
7.1 (4.0)
|
Snipe-IT through 8.6.4 (fixed in 8.7.0) does not enforce the components.view permission on the auth… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-j6fh-grf4-39xr |
5.4 (3.1)
5.3 (4.0)
|
Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing auth… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-f8x2-g5m2-5g2v |
5.4 (3.1)
5.1 (4.0)
|
Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPre… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-f6pr-q64w-m977 |
3.5 (3.1)
5.1 (4.0)
|
Snipe-IT versions >= 7.0.12 and <= 8.6.3 contain an authorization bypass in the Livewire importer c… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-8j28-9m5w-cc2r |
6.5 (3.1)
7.1 (4.0)
|
Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are su… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-5x4v-9547-947f |
5.4 (3.1)
5.3 (4.0)
|
Snipe-IT through version 8.6.3 fails to perform object-level authorization in the updateLicense, up… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-463q-rqpx-h2jj |
6.5 (3.1)
7.1 (4.0)
|
Snipe-IT versions up to and including 8.6.3 contain a race condition (TOCTOU) in the consumable che… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-29vx-j9vj-57vv |
5.0 (3.1)
5.3 (4.0)
|
Snipe-IT versions before 8.7.0 fail to apply company scope filtering to the GET /hardware/requested… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-23vx-5624-m6rx |
4.3 (3.1)
5.3 (4.0)
|
Snipe-IT versions before 8.7.0 contain an improper ownership management vulnerability in the consum… | 2026-09-09T15:35:14Z | 2026-09-09T15:35:14Z |
| ghsa-xm8w-x3m8-cg33 |
5.4 (3.1)
5.3 (4.0)
|
Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0) contain an incorrect authorization flaw in a… | 2026-09-09T15:35:13Z | 2026-09-09T15:35:13Z |
| ghsa-vw35-hhqj-xvrg |
7.3 (3.1)
8.5 (4.0)
|
Snipe-IT before 8.7.0 fails to properly gate Laravel Passport's OAuth client management routes, all… | 2026-09-09T15:35:13Z | 2026-09-09T15:35:13Z |