Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-0012 |
2.1 (4.0)
|
Authentication Error Message Allows Email Address Enum… |
vulnerability-lookup |
vulnerability-lookup |
2026-02-04T19:21:34.411344Z | 2026-02-04T19:21:34.411344Z |
| GCVE-1-2026-0013 |
2.1 (4.0)
|
Flask Application Username Route Collision Allows Rese… |
vulnerability-lookup |
vulnerability-lookup |
2026-02-04T19:27:00.000Z | 2026-02-04T19:32:49.787763Z |
| GCVE-1-2026-20071 |
2.3 (4.0)
|
MISP Dashboard Organisation Picker Exposes Hidden Orga… |
MISP |
MISP |
2026-09-07T12:22:00.000Z | 2026-09-14T06:36:08.164330Z |
| GCVE-1-2026-20082 |
2.3 (4.0)
|
cti-transmute Remote MISP Event Browser Allows Cross-S… |
MISP |
cti-transmute |
2026-08-11T08:02:02.426126Z | 2026-08-11T08:06:56.092767Z |
| GCVE-1-2026-20216 |
2.3 (4.0)
|
MISP Dashboard Organisation Widgets Bypass Organisatio… |
MISP |
MISP |
2026-09-07T12:39:11.343813Z | 2026-09-07T12:39:18.524831Z |
| GCVE-1-2025-0019 |
4 (4.0)
|
Path traversal vulnerability in EventReport for site-admin |
misp |
misp |
2025-11-26T14:47:00.000Z | 2025-11-28T07:27:42.721350Z |
| GCVE-1-2025-0007 |
4.5 (4.0)
|
Missing email validation on user management |
CIRCL |
vulnerability-lookup |
2025-10-13T08:37:00.000Z | 2025-10-13T08:51:37.408861Z |
| GCVE-1-2026-20197 |
4.6 (4.0)
|
MISP CLI Shell Audit Logs Lose User Identity and CLI M… |
MISP |
MISP |
2026-09-14T12:37:46.361164Z | 2026-09-14T12:37:52.449466Z |
| GCVE-1-2026-20154 |
4.8 (4.0)
|
MISP: JavaScript Injection via Remote Tag ID in Event … |
MISP |
MISP |
2026-10-02T15:51:26.684280Z | 2026-10-02T15:51:32.620284Z |
| GCVE-1-2026-20214 |
4.8 (4.0)
|
MISP Stored Cross-Site Scripting via Unescaped Organiz… |
MISP |
MISP |
2026-09-22T13:56:41.339200Z | 2026-09-22T13:56:48.987466Z |
| GCVE-1-2026-20234 |
4.8 (4.0)
|
MISP Reflected XSS via Unvalidated Object Type in Anal… |
MISP |
MISP |
2026-09-22T12:40:00.000Z | 2026-09-22T12:41:23.369639Z |
| GCVE-1-2026-20241 |
4.8 (4.0)
|
MISP Reflected Cross-Site Scripting via Unsanitized An… |
MISP |
MISP |
2026-10-01T08:55:43.692084Z | 2026-10-01T08:55:50.070131Z |
| GCVE-1-2025-0038 |
5 (4.0)
|
Reflected XSS in MISP Template Tag Removal and MISP Ad… |
misp |
misp |
2025-12-10T14:10:00.000Z | 2025-12-10T14:16:55.918270Z |
| GCVE-1-2026-0034 |
5.1 (4.0)
|
CSP Report Endpoint Log Flooding via Incorrect Size Limit |
misp |
misp |
2026-05-20T18:15:00.000Z | 2026-05-20T18:42:33.806971Z |
| GCVE-1-2026-20027 |
5.1 (4.0)
|
Cerebrate self-registration password hash exposure via… |
cerebrate |
cerebrate |
2026-06-11T10:02:42.624185Z | 2026-06-11T10:02:55.904460Z |
| GCVE-1-2026-20035 |
5.1 (4.0)
|
MISP Dashboard Button Widget Allows Stored XSS via Uns… |
MISP |
MISP |
2026-09-07T12:34:59.606582Z | 2026-09-07T12:35:07.407101Z |
| GCVE-1-2026-20036 |
5.1 (4.0)
|
MISP Overmind theme stored XSS via unvalidated homepag… |
misp |
misp |
2026-06-12T20:16:32.896814Z | 2026-06-12T20:21:32.310190Z |
| GCVE-1-2026-20047 |
5.1 (4.0)
|
MISP Event template importer authorization bypass |
misp |
misp |
2026-06-04T13:03:38.630862Z | 2026-06-04T13:05:56.422493Z |
| GCVE-1-2026-20051 |
5.1 (4.0)
|
Server-Side Request Forgery via Favicon Retrieval in L… |
Lookyloo |
PlaywrightCapture |
2026-08-11T13:59:00.000Z | 2026-08-11T14:06:34.155965Z |
| GCVE-1-2026-20062 |
5.1 (4.0)
|
Stored Cross-Site Scripting in CTI-Transmute Conversio… |
misp |
cti-transmute |
2026-08-10T13:56:43.640969Z | 2026-08-10T13:58:29.731288Z |
| GCVE-1-2026-20065 |
5.1 (4.0)
|
MISP Path Traversal via Organization Name in Org-Stati… |
MISP |
MISP |
2026-09-22T14:44:11.001111Z | 2026-09-22T14:44:19.846758Z |
| GCVE-1-2026-20074 |
5.1 (4.0)
|
cti-transmute Saved Graph Configuration Allows Stored … |
MISP |
cti-transmute |
2026-08-11T08:31:00.273544Z | 2026-08-11T08:31:07.407580Z |
| GCVE-1-2026-20077 |
5.1 (4.0)
|
Pivotick Unvalidated Node Image URLs Allow Unintended … |
pivotick |
pivotick |
2026-07-28T13:31:59.211427Z | 2026-07-28T13:32:09.051521Z |
| GCVE-1-2026-20083 |
5.1 (4.0)
|
MISP post-login open redirect via pre_login_requested_url |
misp |
misp |
2026-06-04T13:24:46.311258Z | 2026-06-04T13:26:10.929321Z |
| GCVE-1-2026-20084 |
5.1 (4.0)
|
MISP improper authorization allows organization admini… |
misp |
misp |
2026-06-12T19:25:13.040008Z | 2026-06-12T19:25:24.661452Z |
| GCVE-1-2026-20098 |
5.1 (4.0)
|
MISP: Stored XSS via Inline-Served SVG Organisation Lo… |
MISP |
MISP |
2026-09-14T13:02:43.081085Z | 2026-09-14T13:02:54.706315Z |
| GCVE-1-2026-20101 |
5.1 (4.0)
|
Open redirect in MISP dashboard button widget URL handling |
misp |
misp |
2026-06-04T13:15:07.059298Z | 2026-06-04T13:17:44.483681Z |
| GCVE-1-2026-20109 |
5.1 (4.0)
|
Unauthenticated Stored Vue Template Injection Leads to… |
misp |
cti-transmute |
2026-08-06T20:29:00.000Z | 2026-08-06T22:00:35.563165Z |
| GCVE-1-2026-20118 |
5.1 (4.0)
|
Pivotick Prototype-Key Collision in Tree Layout and Cy… |
pivotick |
pivotick |
2026-07-28T13:19:44.678787Z | 2026-07-28T13:20:04.318008Z |
| GCVE-1-2026-20119 |
5.1 (4.0)
|
Stored Server-Side Request Forgery in Remote-Instance … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:39:44.249540Z | 2026-08-12T14:40:10.120021Z |