Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-71184 | N/A | Gitea fork workflow approval bypass through review events |
Gitea |
Gitea |
2026-10-14T14:37:05.020Z | 2026-10-15T03:56:48.665Z |
| cve-2026-70407 | N/A | Gitea organization listing token scope bypass |
Gitea |
Gitea |
2026-10-14T14:36:59.167Z | 2026-10-14T15:03:17.678Z |
| cve-2026-70406 | N/A | Gitea private comparison disclosure with public-only tokens |
Gitea |
Gitea |
2026-10-14T14:36:53.729Z | 2026-10-14T15:03:17.796Z |
| cve-2026-70402 | N/A | Gitea local code execution through writable Git hooks |
Gitea |
Gitea |
2026-10-14T14:36:46.774Z | 2026-10-14T15:03:17.928Z |
| cve-2026-70400 | N/A | Gitea private migration creation with public-only tokens |
Gitea |
Gitea |
2026-10-14T14:36:41.612Z | 2026-10-14T15:03:18.068Z |
| cve-2026-70396 | N/A | Gitea organization repository creation token scope bypass |
Gitea |
Gitea |
2026-10-14T14:36:36.550Z | 2026-10-18T13:31:06.460Z |
| cve-2026-68964 | N/A | Gitea restricted-user SSH and GPG key metadata disclosure |
Gitea |
Gitea |
2026-10-14T14:36:28.026Z | 2026-10-14T16:45:23.140Z |
| cve-2026-68957 | N/A | Gitea restricted-user issue search disclosure |
Gitea |
Gitea |
2026-10-14T14:36:22.950Z | 2026-10-14T15:11:10.861Z |
| cve-2026-67577 | N/A | Gitea restricted-user activity and heatmap disclosure |
Gitea |
Gitea |
2026-10-14T14:36:16.540Z | 2026-10-14T15:11:39.474Z |
| cve-2026-66877 | N/A | Gitea fork workflow approval bypass through concurrenc… |
Gitea |
Gitea |
2026-10-14T14:36:11.356Z | 2026-10-15T03:56:53.515Z |
| cve-2026-66874 | N/A | Gitea required Actions check bypass through skipped wo… |
Gitea |
Gitea |
2026-10-14T14:36:06.090Z | 2026-10-14T15:12:51.792Z |
| cve-2026-66853 | N/A | Gitea restricted-user organization metadata disclosure |
Gitea |
Gitea |
2026-10-14T14:36:01.009Z | 2026-10-14T15:17:24.381Z |
| cve-2026-66849 | N/A | Gitea restricted-user package visibility bypass |
Gitea |
Gitea |
2026-10-14T14:35:55.956Z | 2026-10-14T15:18:34.090Z |
| cve-2026-84471 | 7.2 (v4.0) | The fix for CVE-2026-12996 was incomplete. A use-… |
OpenVPN |
OpenVPN |
2026-10-14T14:29:04.851Z | 2026-10-16T15:31:52.556Z |
| cve-2026-63792 | N/A | Gitea private reusable workflow disclosure to fork runs |
Gitea |
Gitea |
2026-10-14T14:29:01.896Z | 2026-10-14T15:19:19.611Z |
| cve-2026-63021 | N/A | Gitea Swift package manifest memory exhaustion |
Gitea |
Gitea |
2026-10-14T14:28:56.909Z | 2026-10-14T15:20:14.313Z |
| cve-2026-62925 | N/A | Gitea Alpine package parsing memory exhaustion |
Gitea |
Gitea |
2026-10-14T14:28:51.472Z | 2026-10-14T15:20:54.502Z |
| cve-2026-60021 | N/A | Gitea GitLab migration denial of service |
Gitea |
Gitea |
2026-10-14T14:28:46.424Z | 2026-10-18T13:31:27.676Z |
| cve-2026-60018 | N/A | Gitea OneDev migration denial of service |
Gitea |
Gitea |
2026-10-14T14:28:41.327Z | 2026-10-14T15:21:23.929Z |
| cve-2026-60010 | N/A | Gitea organization team policy bypass through repository API |
Gitea |
Gitea |
2026-10-14T14:28:36.203Z | 2026-10-15T03:56:54.212Z |
| cve-2026-60008 | N/A | Gitea Jupyter notebook UI redress through CSS class in… |
Gitea |
Gitea |
2026-10-14T14:28:31.043Z | 2026-10-14T15:26:34.451Z |
| cve-2026-59774 | N/A | Gitea Org-mode file disclosure and code execution |
Gitea |
Gitea |
2026-10-14T14:28:25.862Z | 2026-10-15T03:56:54.937Z |
| cve-2026-59766 | N/A | Gitea private repository metadata disclosure after acc… |
Gitea |
Gitea |
2026-10-14T14:28:20.687Z | 2026-10-14T15:31:06.825Z |
| cve-2026-25946 | N/A | Gitea OpenID discovery server-side request forgery |
Gitea |
Gitea |
2026-10-14T14:28:15.535Z | 2026-10-14T15:51:01.633Z |
| cve-2026-110650 | 9.3 (v4.0) 9.8 (v3.1) | Thumbnail through 1.5 OS Command Injection via generat… |
anshulkharb |
thumbnail |
2026-10-14T14:17:17.646Z | 2026-10-14T20:38:22.406Z |
| cve-2026-110649 | 9.3 (v4.0) 9.8 (v3.1) | Stills before 25.24.2 OS Command Injection via Media F… |
shahkashani |
stills |
2026-10-14T14:17:16.991Z | 2026-10-14T17:36:45.292Z |
| cve-2026-110648 | 8.5 (v4.0) 7.8 (v3.1) | @offactory/compress-fonts before 1.1.1 OS Command Inje… |
adamarcanov |
compress-fonts |
2026-10-14T14:17:16.381Z | 2026-10-16T17:15:41.334Z |
| cve-2026-110647 | 8.5 (v4.0) 7.8 (v3.1) | Turnpress through 0.4.2 OS Command Injection via Craft… |
jinghaihan |
turnpress |
2026-10-14T14:17:15.770Z | 2026-10-14T18:20:08.036Z |
| cve-2026-110646 | 9.2 (v4.0) 8.1 (v3.1) | Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injec… |
beganovich |
snappdf |
2026-10-14T14:17:15.120Z | 2026-10-20T01:24:42.053Z |
| cve-2026-110645 | 9.3 (v4.0) 9.8 (v3.1) | Video-stitch before 2.0.0-beta.1 OS Command Injection … |
ArsalanDotMe |
video-stitch |
2026-10-14T14:17:14.471Z | 2026-10-14T20:34:06.275Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-043 | Vulnérabilité dans IBM Cognos TM1 | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-042 | Vulnérabilité dans Oracle Supply Chain Products Suite | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-041 | Multiples vulnérabilités dans Oracle Fusion Middleware | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-040 | Multiples vulnérabilités dans Oracle Enterprise Manager Grid Control | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-039 | Multiples vulnérabilités dans Oracle Database Mobile/Lite Server | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-038 | Multiples vulnérabilités dans Oracle PeopleSoft Products | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-037 | Multiples vulnérabilités dans Oracle E-Business Suite | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-036 | Vulnérabilité dans Oracle Database Server | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-035 | Multiples vulnérabilités dans Oracle Siebel CRM | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-034 | Multiples vulnérabilités dans Oracle MySQL | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-033 | Vulnérabilité dans Oracle Virtualization | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-032 | Vulnérabilité dans Oracle JD Edwards | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-031 | Multiples vulnérabilités dans Oracle Sun Products Suite | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-030 | Vulnérabilité dans Samba | 2013-01-16T00:00:00.000000 | 2013-01-16T00:00:00.000000 |
| certa-2013-avi-028 | Multiples vulnérabilités dans Avaya Call Management System | 2013-01-15T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2013-avi-027 | Vulnérabilité dans IBM TS3310 Tape Library | 2013-01-15T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2013-avi-026 | Vulnérabilité dans le système SCADA Siemens Simatic RF Manager | 2013-01-15T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2013-avi-025 | Vulnérabilité dans Citrix CloudPlatform | 2013-01-14T00:00:00.000000 | 2013-01-14T00:00:00.000000 |
| certa-2013-avi-024 | Vulnérabilités dans Ruby on Rails | 2013-01-11T00:00:00.000000 | 2013-01-11T00:00:00.000000 |
| certa-2013-avi-023 | Multiples vulnérabilités dans Google Chrome | 2013-01-11T00:00:00.000000 | 2013-01-11T00:00:00.000000 |
| certa-2013-avi-022 | Multiples vulnérabilités dans les produits Mozilla | 2013-01-10T00:00:00.000000 | 2013-01-10T00:00:00.000000 |
| certa-2013-avi-021 | Vulnérabilité dans le système SCADA RuggedCom | 2013-01-10T00:00:00.000000 | 2013-01-10T00:00:00.000000 |
| certa-2013-avi-020 | Vulnérabilité dans Cisco Unified IP Phone | 2013-01-10T00:00:00.000000 | 2013-01-10T00:00:00.000000 |
| certa-2013-avi-019 | Vulnérabilité dans Cisco Prime LAN Management Solution | 2013-01-10T00:00:00.000000 | 2013-01-10T00:00:00.000000 |
| certa-2013-avi-018 | Vulnérabilité dans le système SCADA Siemens ProcessSuite | 2013-01-10T00:00:00.000000 | 2013-01-10T00:00:00.000000 |
| certa-2013-avi-017 | Multiples vulnérabilités dans Sybase Adapter Server Entreprise | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-016 | Multiples vulnérabilités dans HP OpenVMS | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-015 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-014 | Vulnérabilité dans Adobe Flash Player | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-013 | Multiples vulnérabilités dans Microsoft .NET Framework | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |