Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-58444 | N/A | Personal access token scope enforcement bypass on the … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.429Z | 2026-08-14T19:10:48.309Z |
| cve-2026-58443 | N/A | Public-only repository tokens can update private PR he… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.935Z | 2026-08-14T19:53:05.549Z |
| cve-2026-58442 | N/A | Repository migration SSRF via multi-answer DNS allow-l… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.444Z | 2026-08-14T19:55:16.172Z |
| cve-2026-58441 | N/A | SSRF in restore-repo via unsanitized pull_request.yml … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.967Z | 2026-08-14T19:57:53.325Z |
| cve-2026-58440 | N/A | Webhooks created by a collaborator keep firing after t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.496Z | 2026-08-14T19:59:35.049Z |
| cve-2026-58439 | N/A | Branch Protection Bypass via PR Retargeting Preserves … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.887Z | 2026-08-14T20:01:50.699Z |
| cve-2026-58438 | N/A | Cross-repository IDOR in issue-dependency removal lets… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.141Z | 2026-08-14T20:03:20.000Z |
| cve-2026-58437 | N/A | Repository Visibility Manipulation via Git Push Options |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.661Z | 2026-08-14T19:12:37.154Z |
| cve-2026-58436 | N/A | ParseAcceptLanguage quadratic-time DoS via Locale midd… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.210Z | 2026-08-14T17:14:59.535Z |
| cve-2026-58435 | N/A | Gitea LFS Deploy-Key Privilege Escalation |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.733Z | 2026-08-14T17:20:22.792Z |
| cve-2026-58434 | N/A | Private Repository Metadata Remains Accessible After A… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.261Z | 2026-08-14T17:22:41.943Z |
| cve-2026-58433 | N/A | Team-repository linking endpoint bypasses the RepoAdmi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.794Z | 2026-08-14T19:14:15.445Z |
| cve-2026-58432 | N/A | Missing Authorization and Authorization Bypass Through… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.340Z | 2026-08-14T19:16:44.337Z |
| cve-2026-58431 | N/A | Public-only API token restriction is not enforced on t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.923Z | 2026-08-14T17:24:33.805Z |
| cve-2026-58429 | N/A | Public-Only Personal access tokens scope bypass in Org… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.484Z | 2026-08-14T17:28:06.995Z |
| cve-2026-58428 | N/A | Release attachment extension allowlist bypass via web … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.015Z | 2026-08-14T17:29:36.605Z |
| cve-2026-58427 | N/A | Private org member list leaked via /members API endpoi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:48.425Z | 2026-08-14T17:30:58.822Z |
| cve-2026-58425 | N/A | OAuth token introspection returns metadata of tokens i… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.902Z | 2026-08-14T17:33:14.150Z |
| cve-2026-58420 | N/A | Local File Inclusion via file:// URI in Migration Restore |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.452Z | 2026-08-14T17:43:31.912Z |
| cve-2026-58417 | N/A | REST API exposes organization membership of private or… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.004Z | 2026-08-14T17:34:38.917Z |
| cve-2026-58416 | N/A | Fork-PR Actions task can read a third private reposito… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.534Z | 2026-08-13T18:37:50.990Z |
| cve-2026-58314 | N/A | Two SSRF findings in Gitea 1.26.2 |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.109Z | 2026-08-14T17:35:42.167Z |
| cve-2026-57897 | N/A | Cross-Repo Information Disclosure via Org-Level Action… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.669Z | 2026-08-13T18:38:41.211Z |
| cve-2026-57894 | N/A | Repository Migration Follows Git HTTP Redirects After … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.204Z | 2026-08-14T17:36:49.613Z |
| cve-2026-57886 | N/A | Cross-repository issue/comment attachment re-linking c… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.704Z | 2026-08-14T17:38:03.588Z |
| cve-2026-56755 | N/A | Denial of Service (CPU & Memory Exhaustion) via O(N^2)… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.222Z | 2026-08-13T18:38:14.713Z |
| cve-2026-56750 | N/A | Gitea Remember-Me Token Theft Not Invalidating Attacke… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.788Z | 2026-08-14T19:18:19.475Z |
| cve-2026-56657 | N/A | Gitea SSH Key Parser Denial of Service |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.329Z | 2026-08-13T18:48:49.731Z |
| cve-2026-56654 | N/A | Privilege Escalation via Access Token Scope Escalation… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.890Z | 2026-08-14T19:19:59.583Z |
| cve-2026-56443 | N/A | Token public-only scope bypassed on Limited-visibility… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.458Z | 2026-08-14T20:05:01.023Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-325 | Vulnérabilité dans CA ARCserve Backup | 2008-06-19T00:00:00.000000 | 2008-06-19T00:00:00.000000 |
| certa-2008-avi-324 | Vulnérabilité dans Sun Solaris | 2008-06-18T00:00:00.000000 | 2008-06-18T00:00:00.000000 |
| certa-2008-avi-323 | Vulnérabilités dans Horde | 2008-06-17T00:00:00.000000 | 2008-06-27T00:00:00.000000 |
| certa-2008-avi-322 | Vulnérabilité dans rdesktop | 2008-06-17T00:00:00.000000 | 2008-06-17T00:00:00.000000 |
| certa-2008-avi-321 | Vulnérabilité de Xerox Work Centre web services | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-320 | Vulnérabilités dans le navigateur Opera | 2008-06-13T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-319 | Vulnérabilité de Xerox Work Centre web server | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-318 | Vulnérabilité du noyau Sun Solaris | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-317 | Multiples vulnérabilités dans X.Org | 2008-06-13T00:00:00.000000 | 2008-11-05T00:00:00.000000 |
| certa-2008-avi-316 | Vulnérabilité dans Sun Solaris | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-315 | Vulnérabilité dans Sun StarOffice et StarSuite | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-314 | Multiples vulnérabilités dans FreeType | 2008-06-13T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-313 | Vulnérabilité dans les produits Xerox Copier/Printer | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-312 | Vulnérabilité dans les produits Citect | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-311 | Vulnérabilités dans TYPO3 | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-310 | Vulnérabilité dans les produits CISCO | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-309 | Vulnérabilité dans Active Directory | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-308 | Vulnérabilité liée au service de reconnaissance vocale Windows | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-307 | Vulnérabilités dans Microsoft DirectX | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-306 | Vulnérabilités protocolaires dans Windows (PGM) | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-305 | Vulnérabilité du service Microsoft WINS | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-304 | Vulnérabilités dans Microsoft Internet Explorer | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-303 | Vulnérabilité de la pile Bluetooth Windows | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-302 | Vulnérabilité dans Net-SNMP | 2008-06-10T00:00:00.000000 | 2008-11-20T00:00:00.000000 |
| certa-2008-avi-301 | Multiples vulnérabilités dans Apple QuickTime | 2008-06-10T00:00:00.000000 | 2008-06-10T00:00:00.000000 |
| certa-2008-avi-300 | Vulnérabilité dans OpenOffice.org | 2008-06-10T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-299 | Plusieurs vulnérabilités dans IBM DB2 | 2008-06-10T00:00:00.000000 | 2008-06-10T00:00:00.000000 |
| certa-2008-avi-298 | Vulnérabilité dans HP StorageWorks Storage Monitoring | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-297 | Vulnérabilité du noyau Linux | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-296 | Multiples vulnérabilités dans Novell GroupWise Messenger | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |