Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xgc8-2x4j-3crm |
4.3 (4.0)
|
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated admin… | 2026-08-11T18:30:50Z | 2026-08-12T09:31:23Z |
| ghsa-x9hv-www7-w846 |
6.9 (4.0)
|
Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud… | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-vr3r-mcqv-4cmg |
4.3 (3.1)
5.3 (4.0)
|
An authenticated attacker with low privileges can access an endpoint in the controller’s web interf… | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-vq25-x3jw-cmr7 |
4.3 (4.0)
|
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admin… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-rxvc-mxwf-46c8 |
1.9 (4.0)
|
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticate… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-mgv2-4j37-m3x6 |
7.6 (3.1)
|
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A… | 2026-06-19T18:32:34Z | 2026-08-12T09:31:23Z |
| ghsa-h63q-877w-c3r8 |
4.3 (4.0)
|
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admi… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-g6fv-h3pw-rwgm |
1.1 (4.0)
|
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to … | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-g2h4-h77j-p83h |
4.9 (4.0)
|
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-a… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-fhmv-w5hc-62w9 |
8.2 (3.1)
8.8 (4.0)
|
POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote … | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-cr3m-f373-53gv |
10.0 (4.0)
|
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unau… | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-cq62-j5fx-xhmv |
1.1 (4.0)
|
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to tempo… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-c3g8-7w99-c2xp |
1.9 (4.0)
|
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authentic… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-9v55-xwh5-8wv7 |
9.8 (3.1)
9.3 (4.0)
|
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the def… | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-89p8-vj9j-4m5c |
7.5 (3.1)
8.7 (4.0)
|
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication i… | 2026-08-12T09:31:23Z | 2026-08-12T09:31:23Z |
| ghsa-7w3c-j7rc-7ffv |
4.9 (4.0)
|
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker w… | 2026-08-11T18:30:46Z | 2026-08-12T09:31:23Z |
| ghsa-f2m2-cc3f-h4j2 |
8.5 (3.1)
|
A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only… | 2026-07-28T15:32:17Z | 2026-08-12T09:31:22Z |
| ghsa-qfpg-v669-8p3h |
8.1 (3.1)
|
Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0… | 2026-08-12T06:30:51Z | 2026-08-12T06:30:51Z |
| ghsa-q3rf-7cjg-vf9x |
|
The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is … | 2026-08-12T06:30:50Z | 2026-08-12T06:30:51Z |
| ghsa-g685-gm2w-w3m3 |
9.3 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-08-12T06:30:51Z | 2026-08-12T06:30:51Z |
| ghsa-fh54-f94w-q4hw |
|
The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content e… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:51Z |
| ghsa-cjm3-jv49-2qgp |
|
The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and … | 2026-08-12T06:30:51Z | 2026-08-12T06:30:51Z |
| ghsa-xxj4-g6jj-4r95 |
|
The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled va… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-xgc5-xxmg-c9x4 |
|
The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field … | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-xcj8-382p-cc46 |
|
The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administ… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-x37j-q2h4-mfmw |
|
The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to RE… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-vj5m-w997-qqr7 |
|
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one o… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-v8f5-5g5w-8qm3 |
|
The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually colle… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |
| ghsa-q67g-v857-6748 |
|
The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of i… | 2026-08-12T06:30:49Z | 2026-08-12T06:30:50Z |
| ghsa-p7cg-pvwq-8wxg |
|
The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting… | 2026-08-12T06:30:50Z | 2026-08-12T06:30:50Z |