https://db.gcve.eu Vulnerabilities published by Computer Incident Response Center Luxembourg as GNA-1. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:30:45 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20157 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE https://db.gcve.eu/vuln/gcve-1-2026-20157 Fri, 21 Aug 2026 14:06:00 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20018 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution https://db.gcve.eu/vuln/gcve-1-2026-20018 Mon, 24 Aug 2026 08:05:00 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20215 MISP Object Sync Drops Objects and Attributes When Description Is Empty MISP Object Sync Drops Objects and Attributes When Description Is Empty https://db.gcve.eu/vuln/gcve-1-2026-20215 Wed, 07 Oct 2026 15:42:33 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20315 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests https://db.gcve.eu/vuln/gcve-1-2026-20315 Wed, 07 Oct 2026 15:36:37 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20116 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances https://db.gcve.eu/vuln/gcve-1-2026-20116 Wed, 07 Oct 2026 12:49:30 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20264 MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes https://db.gcve.eu/vuln/gcve-1-2026-20264 Wed, 07 Oct 2026 12:38:32 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20117 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change https://db.gcve.eu/vuln/gcve-1-2026-20117 Tue, 06 Oct 2026 18:58:00 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20275 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS https://db.gcve.eu/vuln/gcve-1-2026-20275 Tue, 06 Oct 2026 18:47:58 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20248 MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View https://db.gcve.eu/vuln/gcve-1-2026-20248 Fri, 02 Oct 2026 16:09:31 +0000 https://db.gcve.eu/vuln/gcve-1-2026-20312 MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data https://db.gcve.eu/vuln/gcve-1-2026-20312 Fri, 02 Oct 2026 16:04:40 +0000