GRYPHON

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

GRYPHON records in CISA KEV

No GRYPHON vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2025-27310 CVE-2025-40916 · GHSA-w6w2-2wxg-ggwx

MEDIUM 46

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0042 Published 2025-06-16 No fix listed CWE-338

TI-2008-02621 CVE-2008-2746 · GHSA-2x8p-q777-q3mr

LOW 35

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-06-17 No fix listed CWE-89

TI-2025-27309 CVE-2025-40915 · GHSA-mqr9-mgqq-52rq

LOW 31

Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00288 Published 2025-06-11 No fix listed CWE-338