Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-ghost-2026-105683 | Ghost: Path Traversal Vulnerability in Ghost ImageSize Service | 2026-10-13T06:50:37.309Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105682 | Ghost: Server-Side Request Forgery in Webhook Trigger | 2026-10-13T06:50:35.774Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105681 | Ghost: Authorization Bypass in Comments Feature | 2026-10-13T06:50:34.258Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105680 | Ghost: Authorization Issue Allowed Author Role to Delete any Post | 2026-10-13T06:50:32.698Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105679 | Ghost: Stored XSS via File Uploads on Local Storage | 2026-10-13T06:50:31.151Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105678 | Ghost: Editors Could Promote Staff Users to Their Own Role | 2026-10-13T06:50:29.575Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105677 | Ghost: Remote Code Execution via Theme Translation Files | 2026-10-13T06:50:28.031Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105676 | Ghost: Path Traversal via Locale Setting | 2026-10-13T06:50:26.473Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105675 | Ghost: Invite Token Disclosure in Ghost Admin API | 2026-10-13T06:50:24.889Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105652 | Ghost: Password Hash Ordering Disclosure in Ghost Admin API | 2026-10-13T06:50:23.382Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105651 | Ghost: Stored XSS via Bookmark Card Images | 2026-10-13T06:50:21.818Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105650 | Ghost: Stored XSS via oEmbed Photo Responses | 2026-10-13T06:50:20.281Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105649 | Ghost: Stored XSS via SVG Uploads Bypassing Sanitization | 2026-10-13T06:50:18.787Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105648 | Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses | 2026-10-13T06:50:17.251Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105647 | Ghost: Server-Side Request Forgery in Bookmark Fetching | 2026-10-13T06:50:15.731Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105646 | Ghost: Regular Expression Denial of Service in Content Import | 2026-10-13T06:50:14.224Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105645 | Ghost: Regular Expression Denial of Service in External Media Inliner | 2026-10-13T06:50:12.658Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105644 | Ghost: Stored XSS via SVG Files in Content Imports | 2026-10-13T06:50:11.090Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105643 | Ghost: Stored XSS via Embed Card Previews | 2026-10-13T06:50:09.536Z | 2026-10-13T07:22:07.779Z |
| bit-ghost-2026-105642 | Ghost: Remote Code Execution via Bookmark Card Images | 2026-10-13T06:50:08.026Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-103009 | Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure | 2026-10-13T06:47:26.127Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-103008 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service | 2026-10-13T06:47:24.793Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-103007 | Incorrect Authorization in Elasticsearch Leading to Privilege Escalation | 2026-10-13T06:47:23.436Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-103006 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service | 2026-10-13T06:47:22.097Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-103005 | Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service | 2026-10-13T06:47:20.777Z | 2026-10-13T07:22:07.779Z |
| bit-elasticsearch-2026-102411 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | 2026-10-13T06:47:19.471Z | 2026-10-13T07:22:07.779Z |
| bit-thrift-2026-96990 | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound | 2026-10-09T10:53:53.194Z | 2026-10-09T11:12:02.352Z |
| bit-thrift-2026-96294 | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection | 2026-10-09T10:53:52.001Z | 2026-10-09T11:12:02.352Z |
| bit-thrift-2026-96292 | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) | 2026-10-09T10:53:50.805Z | 2026-10-09T11:12:02.352Z |
| bit-thrift-2026-96289 | Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard | 2026-10-09T10:53:49.561Z | 2026-10-09T11:12:02.352Z |