PatchTheCVECVEs published by CIRCL
CVEs published by CIRCL (CVE Numbering Authority). 22 tracked.
- CVE-2026-69079 HIGH 8.7 CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_tim
- CVE-2026-69078 HIGH 8.8 CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generati
- CVE-2026-69082 HIGH 8.8 CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functio
- CVE-2026-71445 HIGH 8.2 AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint
- CVE-2026-71446 MEDIUM 6.9 AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view
- CVE-2026-71447 MEDIUM 6.9 AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for cha
- CVE-2026-72759 MEDIUM 6.9 In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete aut
- CVE-2026-71502 MEDIUM 5.1 CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vu
- CVE-2026-72751 MEDIUM 5.1 CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to
- CVE-2026-72760 MEDIUM 5.3 Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list end
- CVE-2026-73160 HIGH 8.7 Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_eve
- CVE-2026-73156 MEDIUM 5.3 Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and
- CVE-2026-73210 MEDIUM 5.1 A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_globa
- CVE-2026-73158 MEDIUM 5.1 Affected versions of cti-transmute insufficiently validate saved graph configuration data
- CVE-2026-73159 MEDIUM 5.1 Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML thro
- CVE-2026-73161 MEDIUM 5.1 Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlig
- CVE-2026-73140 MEDIUM 5.3 Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation
- CVE-2026-73155 MEDIUM 5.3 Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments with
- CVE-2026-73162 MEDIUM 5.3 Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests:
- CVE-2026-73157 LOW 2.3 Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser int
- CVE-2026-75529 MEDIUM 6.9 Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality
- CVE-2026-75531 HIGH 7.0 Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables