Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20107 |
9.4 (4.0)
|
RansomLook API Key Disclosure Through /admin/apikeys H… |
ransomlook |
ransomlook |
2026-08-24T19:38:00.000Z | 2026-08-24T19:51:28.195854Z |
| GCVE-1-2026-20145 |
7 (4.0)
|
Insecure Flask Secret-Key File Permissions Allow Local… |
ransomlook |
ransomlook |
2026-08-24T19:28:37.558610Z | 2026-08-24T19:28:46.627760Z |
| GCVE-1-2026-20086 |
8.8 (4.0)
|
RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:19:50.807894Z | 2026-08-24T19:19:59.130934Z |
| GCVE-1-2026-20148 |
8.8 (4.0)
|
Stored Cross-Site Scripting via Untrusted Cryptocurren… |
ransomlook |
ransomlook |
2026-08-24T14:13:04.261321Z | 2026-08-24T14:13:17.001464Z |
| GCVE-1-2026-20150 |
9.4 (4.0)
|
RansomLook Missing Authorization in Web Configuration … |
ransomlook |
ransomlook |
2026-08-24T14:03:49.792546Z | 2026-08-24T14:04:08.948852Z |
| GCVE-1-2026-20173 |
8.7 (4.0)
|
Unauthenticated Disclosure of Scraping Credentials and… |
ransomlook |
ransomlook |
2026-08-24T13:55:40.557228Z | 2026-08-24T13:55:50.929761Z |
| GCVE-1-2026-20097 |
8.2 (4.0)
|
RansomLook Analysis PDF Generation Allows Server-Side … |
ransomlook |
ransomlook |
2026-08-24T13:49:30.334868Z | 2026-08-24T13:49:43.468021Z |
| GCVE-1-2026-20073 |
8.2 (4.0)
|
RansomLook Arbitrary File Read via Path Traversal in P… |
ransomlook |
ransomlook |
2026-08-24T13:31:44.429290Z | 2026-08-24T13:31:59.815590Z |
| GCVE-1-2026-20166 |
8.7 (4.0)
|
Private Group and Market Posts Disclosed Through Publi… |
ransomlook |
ransomlook |
2026-08-24T13:26:41.992725Z | 2026-08-24T13:26:52.078718Z |
| GCVE-1-2026-20188 |
6.9 (4.0)
|
Redis Glob Pattern Injection Allows Unauthorized Enume… |
ransomlook |
ransomlook |
2026-08-24T13:18:00.000Z | 2026-08-24T13:18:54.707851Z |
| GCVE-1-2026-20137 |
9.2 (4.0)
|
RansomLook Missing Authorization Allows Disclosure of … |
ransomlook |
ransomlook |
2026-08-24T13:09:11.020129Z | 2026-08-24T13:09:20.280924Z |
| GCVE-1-2026-20050 |
9.2 (4.0)
|
RansomLook Unauthenticated Database Export Exposes Pri… |
ransomlook |
ransomlook |
2026-08-24T13:03:04.849291Z | 2026-08-24T13:03:20.979300Z |
| GCVE-1-2026-20060 |
8.8 (4.0)
|
Missing Authentication Allows Unauthorized Creation of… |
ransomlook |
ransomlook |
2026-08-24T12:57:38.826361Z | 2026-08-24T12:57:54.973935Z |
| GCVE-1-2026-20208 |
9.3 (4.0)
10 (4.0)
|
Switch RG-ES208GC - Reyee - Ruijie equipments |
Ruijie |
Reyee RG-ES208GC |
2026-08-24T09:14:00.000Z | 2026-08-24T10:23:30.515440Z |
| GCVE-1-2026-20096 |
6 (4.0)
|
DJI Drone HTTP Media Server Denial of Service via Conn… |
DJI |
Neo |
2026-08-24T08:45:47.214204Z | 2026-08-24T08:46:02.937720Z |
| GCVE-1-2026-20018 |
8.5 (4.0)
|
DJI Drone Bluetooth Interface Unauthenticated DUML Com… |
DJI |
Neo |
2026-08-24T08:05:43.611260Z | 2026-08-24T08:07:50.237035Z |
| GCVE-1-2026-20157 |
9.4 (4.0)
|
Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE |
DJI |
Neo |
2026-08-21T14:06:00.000Z | 2026-08-24T07:28:26.616826Z |
| GCVE-1-2026-20169 |
8.7 (4.0)
|
DJI Drone HTTP Media Server Allows Unauthenticated Acc… |
DJI |
Neo |
2026-08-24T07:23:00.946991Z | 2026-08-24T07:25:18.426734Z |
| GCVE-1-2026-20042 |
9.3 (4.0)
|
DJI Drone FTP Service Allows Unrestricted Storage Cons… |
DJI |
Neo |
2026-08-24T07:01:00.000Z | 2026-08-24T07:04:22.450589Z |
| GCVE-1-2026-20136 |
6.3 (4.0)
|
Cross-Document Parser State Contamination in misp-stix |
misp |
misp-stix |
2026-08-21T10:11:28.209263Z | 2026-08-21T10:11:49.861451Z |
| GCVE-1-2026-20053 |
8.7 (4.0)
|
Denial of Service in MISP-STIX Import via Malformed or… |
misp |
misp-stix |
2026-08-21T09:54:53.412150Z | 2026-08-21T09:55:05.204624Z |
| GCVE-1-2026-20174 |
8.8 (4.0)
|
Path Traversal in MISP Object Template Resolution Duri… |
misp |
misp-stix |
2026-08-21T09:48:06.996945Z | 2026-08-21T09:48:16.277512Z |
| GCVE-1-2026-20011 |
6.9 (4.0)
|
STIX2 Parser Confusion and Mass Assignment Allow Unaut… |
MISP |
misp-stix |
2026-08-21T08:53:45.885558Z | 2026-08-21T08:53:55.995367Z |
| GCVE-1-2026-20012 |
7.1 (4.0)
|
Authenticated Server-Side Request Forgery in AIL Frame… |
ail-project |
ail-framework |
2026-08-19T08:52:43.763320Z | 2026-08-19T08:53:07.887253Z |
| GCVE-1-2026-20049 |
7 (4.0)
|
Stored Cross-Site Scripting in URL Observables via Loo… |
pandora-analysis |
pandora |
2026-08-17T20:59:47.638663Z | 2026-08-17T21:00:08.914567Z |
| GCVE-1-2026-20132 |
6.9 (4.0)
|
Stored Cross-Site Scripting via MIME-Type Confusion in… |
pandora-analysis |
pandora |
2026-08-17T20:52:04.593298Z | 2026-08-17T20:52:34.856855Z |
| GCVE-1-2026-20014 |
8.7 (4.0)
|
Unbounded DAA Decompression in Pandora Allows Denial o… |
pandora-analysis |
pandora |
2026-08-15T21:53:16.784670Z | 2026-08-15T21:56:41.916240Z |
| GCVE-1-2026-20162 |
10 (4.0)
|
Path Traversal in TAR Archive Extraction Allows Arbitr… |
pandora-analysis |
pandora |
2026-08-15T21:38:55.588915Z | 2026-08-15T21:39:05.458138Z |
| GCVE-1-2026-20119 |
5.1 (4.0)
|
Stored Server-Side Request Forgery in Remote-Instance … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:39:44.249540Z | 2026-08-12T14:40:10.120021Z |
| GCVE-1-2026-20159 |
8.8 (4.0)
|
Reusable Account Activation and Recovery Tokens Allow … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:32:19.932784Z | 2026-08-12T14:32:52.007745Z |