Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-58441 | N/A | SSRF in restore-repo via unsanitized pull_request.yml … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.967Z | 2026-08-14T19:57:53.325Z |
| cve-2026-58440 | N/A | Webhooks created by a collaborator keep firing after t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.496Z | 2026-08-14T19:59:35.049Z |
| cve-2026-58439 | N/A | Branch Protection Bypass via PR Retargeting Preserves … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.887Z | 2026-08-14T20:01:50.699Z |
| cve-2026-58438 | N/A | Cross-repository IDOR in issue-dependency removal lets… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.141Z | 2026-08-14T20:03:20.000Z |
| cve-2026-58437 | N/A | Repository Visibility Manipulation via Git Push Options |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.661Z | 2026-08-14T19:12:37.154Z |
| cve-2026-58436 | N/A | ParseAcceptLanguage quadratic-time DoS via Locale midd… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.210Z | 2026-08-14T17:14:59.535Z |
| cve-2026-58435 | N/A | Gitea LFS Deploy-Key Privilege Escalation |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.733Z | 2026-08-14T17:20:22.792Z |
| cve-2026-58434 | N/A | Private Repository Metadata Remains Accessible After A… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.261Z | 2026-08-14T17:22:41.943Z |
| cve-2026-58433 | N/A | Team-repository linking endpoint bypasses the RepoAdmi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.794Z | 2026-08-14T19:14:15.445Z |
| cve-2026-58432 | N/A | Missing Authorization and Authorization Bypass Through… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.340Z | 2026-08-14T19:16:44.337Z |
| cve-2026-58431 | N/A | Public-only API token restriction is not enforced on t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.923Z | 2026-08-14T17:24:33.805Z |
| cve-2026-58429 | N/A | Public-Only Personal access tokens scope bypass in Org… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.484Z | 2026-08-14T17:28:06.995Z |
| cve-2026-58428 | N/A | Release attachment extension allowlist bypass via web … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.015Z | 2026-08-14T17:29:36.605Z |
| cve-2026-58427 | N/A | Private org member list leaked via /members API endpoi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:48.425Z | 2026-08-14T17:30:58.822Z |
| cve-2026-58425 | N/A | OAuth token introspection returns metadata of tokens i… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.902Z | 2026-08-14T17:33:14.150Z |
| cve-2026-58420 | N/A | Local File Inclusion via file:// URI in Migration Restore |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.452Z | 2026-08-14T17:43:31.912Z |
| cve-2026-58417 | N/A | REST API exposes organization membership of private or… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.004Z | 2026-08-14T17:34:38.917Z |
| cve-2026-58416 | N/A | Fork-PR Actions task can read a third private reposito… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.534Z | 2026-08-13T18:37:50.990Z |
| cve-2026-58314 | N/A | Two SSRF findings in Gitea 1.26.2 |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.109Z | 2026-08-14T17:35:42.167Z |
| cve-2026-57897 | N/A | Cross-Repo Information Disclosure via Org-Level Action… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.669Z | 2026-08-13T18:38:41.211Z |
| cve-2026-57894 | N/A | Repository Migration Follows Git HTTP Redirects After … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.204Z | 2026-08-14T17:36:49.613Z |
| cve-2026-57886 | N/A | Cross-repository issue/comment attachment re-linking c… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.704Z | 2026-08-14T17:38:03.588Z |
| cve-2026-56755 | N/A | Denial of Service (CPU & Memory Exhaustion) via O(N^2)… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.222Z | 2026-08-13T18:38:14.713Z |
| cve-2026-56750 | N/A | Gitea Remember-Me Token Theft Not Invalidating Attacke… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.788Z | 2026-08-14T19:18:19.475Z |
| cve-2026-56657 | N/A | Gitea SSH Key Parser Denial of Service |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.329Z | 2026-08-13T18:48:49.731Z |
| cve-2026-56654 | N/A | Privilege Escalation via Access Token Scope Escalation… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.890Z | 2026-08-14T19:19:59.583Z |
| cve-2026-56443 | N/A | Token public-only scope bypassed on Limited-visibility… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.458Z | 2026-08-14T20:05:01.023Z |
| cve-2026-55987 | N/A | OAuth2 sign-in reactivates an administrator-deactivate… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.020Z | 2026-08-14T20:06:36.724Z |
| cve-2026-55986 | N/A | Email Management API Bypasses ManageCredentials Featur… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:41.580Z | 2026-08-14T18:29:12.328Z |
| cve-2026-55984 | N/A | Null Pointer Dereference in AddTime API Causes Authent… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:40.619Z | 2026-08-14T17:40:25.217Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-324 | Multiples vulnérabilités du navigateur Opera | 2007-07-20T00:00:00.000000 | 2007-07-20T00:00:00.000000 |
| certa-2007-avi-323 | Vulnérabilité dans Tcpdump | 2007-07-19T00:00:00.000000 | 2007-08-01T00:00:00.000000 |
| certa-2007-avi-322 | Plusieurs vulnérabilités dans Ipswitch IMail Server | 2007-07-19T00:00:00.000000 | 2007-07-19T00:00:00.000000 |
| certa-2007-avi-321 | Vulnérabilité dans Cisco Wide Area Application Services (WAAS) | 2007-07-19T00:00:00.000000 | 2007-07-19T00:00:00.000000 |
| certa-2007-avi-320 | Vulnérabilité d'IBM Tivoli Provisioning Manager | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-319 | Vulnérabilité dans HP ServiceGuard | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-318 | Multiples vulnérabilités dans Mozilla Firefox | 2007-07-18T00:00:00.000000 | 2007-08-27T00:00:00.000000 |
| certa-2007-avi-317 | Vulnérabilité des produits RSA | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-316 | Vulnérabilité dans Kaspersky Anti-Virus pour Check Point Firewall-1 | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-315 | Multiples vulnérabilités dans les produits CA | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-314 | Multiples vulnérabilités dans des produits Hitachi | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-313 | Vulnérabilité dans la bibliothèque libarchive | 2007-07-18T00:00:00.000000 | 2007-08-08T00:00:00.000000 |
| certa-2007-avi-312 | Vulnérabilité dans IPSwitch WS_FTP Logging Server | 2007-07-18T00:00:00.000000 | 2007-07-18T00:00:00.000000 |
| certa-2007-avi-311 | Multiples vulnérabilités dans les produits Oracle | 2007-07-18T00:00:00.000000 | 2007-07-19T00:00:00.000000 |
| certa-2007-avi-310 | Vulnérabilité dans la commande rcp sous Sun Solaris | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-309 | Multiples vulnérabilités des produits Symantec | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-308 | Multiples vulnérabilités dans Apple QuickTime | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-307 | Multiples vulnérabilités de AVG Antivirus | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-306 | Vulnérabilité de ClamAV | 2007-07-12T00:00:00.000000 | 2007-07-27T00:00:00.000000 |
| certa-2007-avi-305 | Vulnérabilité dans AIX d'IBM | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-304 | Vulnérabilité dans Cisco Unified Communications Manager | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-303 | Vulnérabilité dans Symantec Backup Exec | 2007-07-12T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-302 | Vulnérabilité dans Sun Java Secure Socket Extension | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-301 | Vulnérabilité dans la machine virtuelle Java de Sun | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-300 | Vulnérabilités dans Drupal | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-299 | Vulnérabilités dans Adobe Flash Player | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-298 | Vulnérabilité dans 3Com TippingPoint IPS | 2007-07-11T00:00:00.000000 | 2007-07-12T00:00:00.000000 |
| certa-2007-avi-297 | Multiples vulnérabiliés du Common Management Agent (CMA) de McAfee | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-296 | Vulnérabilité dans Microsoft Internet Information Services (IIS) | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |
| certa-2007-avi-295 | Vulnérabilités dans Microsoft .NET Framework | 2007-07-11T00:00:00.000000 | 2007-07-11T00:00:00.000000 |