Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-0012 |
2.1 (4.0)
|
Authentication Error Message Allows Email Address Enum… |
vulnerability-lookup |
vulnerability-lookup |
2026-02-04T19:21:34.411344Z | 2026-02-04T19:21:34.411344Z |
| GCVE-1-2026-0013 |
2.1 (4.0)
|
Flask Application Username Route Collision Allows Rese… |
vulnerability-lookup |
vulnerability-lookup |
2026-02-04T19:27:00.000Z | 2026-02-04T19:32:49.787763Z |
| GCVE-1-2026-20082 |
2.3 (4.0)
|
cti-transmute Remote MISP Event Browser Allows Cross-S… |
MISP |
cti-transmute |
2026-08-11T08:02:02.426126Z | 2026-08-11T08:06:56.092767Z |
| GCVE-1-2025-0019 |
4 (4.0)
|
Path traversal vulnerability in EventReport for site-admin |
misp |
misp |
2025-11-26T14:47:00.000Z | 2025-11-28T07:27:42.721350Z |
| GCVE-1-2025-0038 |
5 (4.0)
|
Reflected XSS in MISP Template Tag Removal and MISP Ad… |
misp |
misp |
2025-12-10T14:10:00.000Z | 2025-12-10T14:16:55.918270Z |
| GCVE-1-2026-0034 |
5.1 (4.0)
|
CSP Report Endpoint Log Flooding via Incorrect Size Limit |
misp |
misp |
2026-05-20T18:15:00.000Z | 2026-05-20T18:42:33.806971Z |
| GCVE-1-2026-20027 |
5.1 (4.0)
|
Cerebrate self-registration password hash exposure via… |
cerebrate |
cerebrate |
2026-06-11T10:02:42.624185Z | 2026-06-11T10:02:55.904460Z |
| GCVE-1-2026-20036 |
5.1 (4.0)
|
MISP Overmind theme stored XSS via unvalidated homepag… |
misp |
misp |
2026-06-12T20:16:32.896814Z | 2026-06-12T20:21:32.310190Z |
| GCVE-1-2026-20047 |
5.1 (4.0)
|
MISP Event template importer authorization bypass |
misp |
misp |
2026-06-04T13:03:38.630862Z | 2026-06-04T13:05:56.422493Z |
| GCVE-1-2026-20051 |
5.1 (4.0)
|
Server-Side Request Forgery via Favicon Retrieval in L… |
Lookyloo |
PlaywrightCapture |
2026-08-11T13:59:00.000Z | 2026-08-11T14:06:34.155965Z |
| GCVE-1-2026-20062 |
5.1 (4.0)
|
Stored Cross-Site Scripting in CTI-Transmute Conversio… |
misp |
cti-transmute |
2026-08-10T13:56:43.640969Z | 2026-08-10T13:58:29.731288Z |
| GCVE-1-2026-20074 |
5.1 (4.0)
|
cti-transmute Saved Graph Configuration Allows Stored … |
MISP |
cti-transmute |
2026-08-11T08:31:00.273544Z | 2026-08-11T08:31:07.407580Z |
| GCVE-1-2026-20077 |
5.1 (4.0)
|
Pivotick Unvalidated Node Image URLs Allow Unintended … |
pivotick |
pivotick |
2026-07-28T13:31:59.211427Z | 2026-07-28T13:32:09.051521Z |
| GCVE-1-2026-20083 |
5.1 (4.0)
|
MISP post-login open redirect via pre_login_requested_url |
misp |
misp |
2026-06-04T13:24:46.311258Z | 2026-06-04T13:26:10.929321Z |
| GCVE-1-2026-20084 |
5.1 (4.0)
|
MISP improper authorization allows organization admini… |
misp |
misp |
2026-06-12T19:25:13.040008Z | 2026-06-12T19:25:24.661452Z |
| GCVE-1-2026-20101 |
5.1 (4.0)
|
Open redirect in MISP dashboard button widget URL handling |
misp |
misp |
2026-06-04T13:15:07.059298Z | 2026-06-04T13:17:44.483681Z |
| GCVE-1-2026-20109 |
5.1 (4.0)
|
Unauthenticated Stored Vue Template Injection Leads to… |
misp |
cti-transmute |
2026-08-06T20:29:00.000Z | 2026-08-06T22:00:35.563165Z |
| GCVE-1-2026-20118 |
5.1 (4.0)
|
Pivotick Prototype-Key Collision in Tree Layout and Cy… |
pivotick |
pivotick |
2026-07-28T13:19:44.678787Z | 2026-07-28T13:20:04.318008Z |
| GCVE-1-2026-20119 |
5.1 (4.0)
|
Stored Server-Side Request Forgery in Remote-Instance … |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:39:44.249540Z | 2026-08-12T14:40:10.120021Z |
| GCVE-1-2026-20131 |
5.1 (4.0)
|
AIL Framework - Missing Rate Limiting Enables Brute-Fo… |
ail project |
ail framework |
2026-06-22T13:02:18.669480Z | 2026-06-22T13:02:27.300718Z |
| GCVE-1-2026-20164 |
5.1 (4.0)
|
cti-transmute Stored XSS via Crafted Tag Icon on Admin… |
MISP |
cti-transmute |
2026-08-11T08:45:48.745486Z | 2026-08-11T08:45:57.455093Z |
| GCVE-1-2026-20177 |
5.1 (4.0)
|
cti-transmute Conversion Table Allows XSS via Unescape… |
MISP |
cti-transmute |
2026-08-11T09:07:45.287405Z | 2026-08-11T09:07:52.571197Z |
| GCVE-1-2026-20003 |
5.3 (4.0)
|
MISP: Improper sharing group authorization check when … |
misp |
misp |
2026-07-09T15:05:37.386912Z | 2026-07-09T15:05:55.940926Z |
| GCVE-1-2026-20004 |
5.3 (4.0)
|
MISP importModule missing authorization allows read-on… |
misp |
misp |
2026-07-08T13:29:57.644210Z | 2026-07-08T13:30:08.436075Z |
| GCVE-1-2026-20008 |
5.3 (4.0)
|
MISP template builder exposes non-visible custom galax… |
misp |
misp |
2026-06-12T20:06:54.852957Z | 2026-06-12T20:07:09.547667Z |
| GCVE-1-2026-20030 |
5.3 (4.0)
|
MISP UiBeta event index reflected XSS in advanced filt… |
misp |
misp |
2026-06-12T20:34:00.000Z | 2026-06-12T20:35:57.600048Z |
| GCVE-1-2026-20034 |
5.3 (4.0)
|
Authorization Bypass in SSE Pub/Sub Allows Unconfirmed… |
vulnerability-lookup |
vulnerability-lookup |
2026-08-12T14:15:40.983661Z | 2026-08-12T14:15:52.569796Z |
| GCVE-1-2026-20037 |
5.3 (4.0)
|
cti-transmute Following List Exposes User Email Addres… |
MISP |
cti-transmute |
2026-08-10T14:30:48.103367Z | 2026-08-10T14:31:48.310080Z |
| GCVE-1-2026-20044 |
5.3 (4.0)
|
MISP AuthKey edit endpoint allows authenticated user e… |
misp |
misp |
2026-06-12T20:45:00.000Z | 2026-06-12T20:47:57.970104Z |
| GCVE-1-2026-20066 |
5.3 (4.0)
|
Unauthorized exposure of private galaxies in MISP even… |
misp |
misp |
2026-06-04T12:50:00.000Z | 2026-06-04T12:55:19.417449Z |