Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 79 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-16151 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
CartoDB carto-api-client filters.ts addFilter prototyp… |
CartoDB |
carto-api-client |
2026-07-18T19:45:08.449Z | 2026-07-18T19:45:08.449Z |
| CVE-2026-53994 |
7.5 (3.1)
7.7 (4.0)
|
ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Int… |
ProFTPD Project |
ProFTPD |
2026-07-18T19:30:32.740Z | 2026-07-18T19:30:32.740Z |
| CVE-2026-57848 |
5.5 (3.1)
6.8 (4.0)
|
Stoat for Android Internal File Disclosure via Exporte… |
stoatchat |
Stoat for Android |
2026-07-18T19:15:18.458Z | 2026-07-18T19:15:18.458Z |
| CVE-2026-16150 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RobinHerbots Inputmask Internal Deep Merge Helper exte… |
RobinHerbots |
Inputmask |
2026-07-18T19:15:08.501Z | 2026-07-18T19:15:08.501Z |
| CVE-2026-16133 |
2.3 (4.0)
5 (3.1)
5 (3.0)
|
LiuMengxuan04 MiniCode mcp.ts child_process.spawn comm… |
LiuMengxuan04 |
MiniCode |
2026-07-18T19:00:12.613Z | 2026-07-18T19:00:12.613Z |
| CVE-2026-16131 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
itsourcecode Hospital Management System prescriptionre… |
itsourcecode |
Hospital Management System |
2026-07-18T18:15:08.418Z | 2026-07-18T18:15:08.418Z |
| CVE-2026-16130 |
4.8 (4.0)
4.4 (3.1)
4.4 (3.0)
|
nearai ironclaw write_file path_utils.rs validate_path… |
nearai |
ironclaw |
2026-07-18T17:15:10.968Z | 2026-07-18T17:15:10.968Z |
| CVE-2026-16129 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
princezuda SafestClaw Built-in Web shell.py ShellActio… |
princezuda |
SafestClaw |
2026-07-18T17:00:09.200Z | 2026-07-18T17:00:09.200Z |
| CVE-2026-16128 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request swarm.c receiver_thread se… |
zevorn |
rt-claw |
2026-07-18T16:30:08.241Z | 2026-07-18T16:30:08.241Z |
| CVE-2026-16127 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request tool_net.c claw_net_post s… |
zevorn |
rt-claw |
2026-07-18T16:00:08.864Z | 2026-07-18T16:00:08.864Z |
| CVE-2026-16126 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw Swarm RPC Receiver swarm.c handle_rpc_r… |
zevorn |
rt-claw |
2026-07-18T15:45:08.996Z | 2026-07-18T15:45:08.996Z |
| CVE-2026-16125 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request net.c claw_net_post server… |
zevorn |
rt-claw |
2026-07-18T15:15:08.064Z | 2026-07-18T15:15:08.064Z |
| CVE-2026-16124 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw web_fetch web_shared.go isPriv… |
nextlevelbuilder |
GoClaw |
2026-07-18T15:00:11.635Z | 2026-07-18T15:00:11.635Z |
| CVE-2026-16123 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.g… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:45:08.338Z | 2026-07-18T14:45:08.338Z |
| CVE-2026-16122 |
4.8 (4.0)
4.3 (3.1)
4.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go matchesAllowl… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:30:09.020Z | 2026-07-18T14:30:09.020Z |
| CVE-2026-16121 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go isSafeBin imp… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:15:09.776Z | 2026-07-18T14:15:09.776Z |
| CVE-2026-9323 |
9.2 (4.0)
8.1 (3.1)
|
Insecure PRNG and Information Exposure in urwid Web Di… |
urwid |
urwid |
2026-07-18T13:51:06.021Z | 2026-07-18T13:51:06.021Z |
| CVE-2026-11826 |
8.7 (4.0)
8.8 (3.1)
|
OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master… |
openplcproject |
OpenPLC_v3 |
2026-07-18T13:35:35.639Z | 2026-07-18T13:35:35.639Z |
| CVE-2026-16120 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go extractBin na… |
nextlevelbuilder |
GoClaw |
2026-07-18T13:30:10.481Z | 2026-07-18T13:30:10.481Z |
| CVE-2025-71398 |
5.8 (4.0)
|
SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass |
surrealdb |
surrealdb |
2026-07-18T13:10:15.797Z | 2026-07-18T13:10:15.797Z |
| CVE-2025-71397 |
7.1 (4.0)
|
SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops |
surrealdb |
surrealdb |
2026-07-18T13:10:15.129Z | 2026-07-18T13:10:15.129Z |
| CVE-2025-71396 |
2.3 (4.0)
|
SurrealDB before 2.2.2 Denial of Service via JavaScrip… |
surrealdb |
surrealdb |
2026-07-18T13:10:14.441Z | 2026-07-18T13:10:14.441Z |
| CVE-2025-71395 |
7.1 (4.0)
|
SurrealDB before 2.2.2 Memory Exhaustion via string::replace |
surrealdb |
surrealdb |
2026-07-18T13:10:13.744Z | 2026-07-18T13:10:13.744Z |
| CVE-2025-71394 |
2.3 (4.0)
|
SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER |
surrealdb |
surrealdb |
2026-07-18T13:10:13.041Z | 2026-07-18T13:10:13.041Z |
| CVE-2025-71393 |
6 (4.0)
|
SurrealDB before 2.2.2 Memory Exhaustion via Nested Fu… |
surrealdb |
surrealdb |
2026-07-18T13:10:12.360Z | 2026-07-18T13:10:12.360Z |
| CVE-2025-71392 |
9.4 (4.0)
|
SurrealDB before 2.2.2 SurrealQL Injection via export |
surrealdb |
surrealdb |
2026-07-18T13:10:11.661Z | 2026-07-18T13:10:11.661Z |
| CVE-2025-71391 |
7.1 (4.0)
|
SurrealDB before 2.2.2 Denial of Service via /sql endpoint |
surrealdb |
surrealdb |
2026-07-18T13:10:10.977Z | 2026-07-18T13:10:10.977Z |
| CVE-2025-71390 |
5.8 (4.0)
|
SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution |
surrealdb |
surrealdb |
2026-07-18T13:10:10.319Z | 2026-07-18T13:10:10.319Z |
| CVE-2024-58370 |
7.1 (4.0)
6.5 (3.1)
|
SurrealDB before 1.1.0 Uncontrolled Recursion Denial o… |
surrealdb |
surrealdb |
2026-07-18T13:10:09.658Z | 2026-07-18T13:10:09.658Z |
| CVE-2024-58369 |
7.1 (4.0)
6.5 (3.1)
|
SurrealDB before 1.1.1 Denial of Service via Global Pa… |
surrealdb |
surrealdb |
2026-07-18T13:10:08.965Z | 2026-07-18T13:10:08.965Z |