Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-67613 | 6.9 (v4.0) 4.9 (v3.1) | CyberPanel < 3.0.0 Path Traversal File Read via cloudA… |
usmannasir |
cyberpanel |
2026-08-13T17:09:05.229Z | 2026-08-14T18:09:34.128Z |
| cve-2026-67614 | 9.3 (v4.0) 9.8 (v3.1) | CyberPanel < 3.0.0 Hard-coded JWT Secret Authenticatio… |
usmannasir |
cyberpanel |
2026-08-13T17:08:40.038Z | 2026-08-14T16:51:02.511Z |
| cve-2026-24059 | N/A | Gitea runner registration-token GET endpoint performs … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:48:52.623Z | 2026-08-14T17:10:45.377Z |
| cve-2026-24791 | N/A | Public-only tokens bypass private-resource restriction… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:48:52.255Z | 2026-08-13T18:48:01.037Z |
| cve-2026-59765 | N/A | SSRF via Migration Asset Downloads Bypasses hostmatche… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:59.148Z | 2026-08-14T19:01:54.065Z |
| cve-2026-59763 | N/A | Unbounded Arch package file metadata can cause resourc… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.792Z | 2026-08-13T18:49:48.864Z |
| cve-2026-58511 | N/A | Webhook Authorization Header Returned in Plaintext via API |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.442Z | 2026-08-13T18:50:39.280Z |
| cve-2026-58510 | N/A | GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.092Z | 2026-08-13T19:14:00.411Z |
| cve-2026-58508 | N/A | Two SSRF vulnerabilities in Gitea migration/mirror (DN… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.726Z | 2026-08-14T19:04:47.409Z |
| cve-2026-58507 | N/A | Private Repository Existence Disclosure via go-get Met… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.367Z | 2026-08-14T19:06:32.423Z |
| cve-2026-58445 | N/A | Cross-repository label-ID enumeration oracle via unsco… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.978Z | 2026-08-14T19:08:41.522Z |
| cve-2026-58444 | N/A | Personal access token scope enforcement bypass on the … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.429Z | 2026-08-14T19:10:48.309Z |
| cve-2026-58443 | N/A | Public-only repository tokens can update private PR he… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.935Z | 2026-08-14T19:53:05.549Z |
| cve-2026-58442 | N/A | Repository migration SSRF via multi-answer DNS allow-l… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.444Z | 2026-08-14T19:55:16.172Z |
| cve-2026-58441 | N/A | SSRF in restore-repo via unsanitized pull_request.yml … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.967Z | 2026-08-14T19:57:53.325Z |
| cve-2026-58440 | N/A | Webhooks created by a collaborator keep firing after t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.496Z | 2026-08-14T19:59:35.049Z |
| cve-2026-58439 | N/A | Branch Protection Bypass via PR Retargeting Preserves … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.887Z | 2026-08-14T20:01:50.699Z |
| cve-2026-58438 | N/A | Cross-repository IDOR in issue-dependency removal lets… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.141Z | 2026-08-14T20:03:20.000Z |
| cve-2026-58437 | N/A | Repository Visibility Manipulation via Git Push Options |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.661Z | 2026-08-14T19:12:37.154Z |
| cve-2026-58436 | N/A | ParseAcceptLanguage quadratic-time DoS via Locale midd… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.210Z | 2026-08-14T17:14:59.535Z |
| cve-2026-58435 | N/A | Gitea LFS Deploy-Key Privilege Escalation |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.733Z | 2026-08-14T17:20:22.792Z |
| cve-2026-58434 | N/A | Private Repository Metadata Remains Accessible After A… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.261Z | 2026-08-14T17:22:41.943Z |
| cve-2026-58433 | N/A | Team-repository linking endpoint bypasses the RepoAdmi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.794Z | 2026-08-14T19:14:15.445Z |
| cve-2026-58432 | N/A | Missing Authorization and Authorization Bypass Through… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.340Z | 2026-08-14T19:16:44.337Z |
| cve-2026-58431 | N/A | Public-only API token restriction is not enforced on t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.923Z | 2026-08-14T17:24:33.805Z |
| cve-2026-58429 | N/A | Public-Only Personal access tokens scope bypass in Org… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.484Z | 2026-08-14T17:28:06.995Z |
| cve-2026-58428 | N/A | Release attachment extension allowlist bypass via web … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.015Z | 2026-08-14T17:29:36.605Z |
| cve-2026-58427 | N/A | Private org member list leaked via /members API endpoi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:48.425Z | 2026-08-14T17:30:58.822Z |
| cve-2026-58425 | N/A | OAuth token introspection returns metadata of tokens i… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.902Z | 2026-08-14T17:33:14.150Z |
| cve-2026-58420 | N/A | Local File Inclusion via file:// URI in Migration Restore |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.452Z | 2026-08-14T17:43:31.912Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-275 | Vulnérabilité dans la bibliothèque Qt | 2004-08-24T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-274 | Vulnérabilité de SpamAssassin | 2004-08-24T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-avi-273 | Vulnérabilité du système d'exploitation Cisco IOS | 2004-08-20T00:00:00.000000 | 2004-08-20T00:00:00.000000 |
| certa-2004-avi-272 | Vulnérabilités du serveur tnftpd | 2004-08-19T00:00:00.000000 | 2004-10-21T00:00:00.000000 |
| certa-2004-avi-271 | Vulnérabilité de rsync | 2004-08-17T00:00:00.000000 | 2004-09-02T00:00:00.000000 |
| certa-2004-avi-270 | Vulnérabilités d'Adobe Acrobat | 2004-08-17T00:00:00.000000 | 2004-09-02T00:00:00.000000 |
| certa-2004-avi-269 | Vulnérabilité de gaim | 2004-08-16T00:00:00.000000 | 2004-09-09T00:00:00.000000 |
| certa-2004-avi-268 | Vulnérabilité du navigateur Opera | 2004-08-06T00:00:00.000000 | 2004-08-31T00:00:00.000000 |
| certa-2004-avi-267 | Vulnérabilité dans PuTTY | 2004-08-05T00:00:00.000000 | 2004-08-06T00:00:00.000000 |
| certa-2004-avi-266 | Multiples vulnérabilités de la bibliothèque libpng | 2004-08-05T00:00:00.000000 | 2004-12-06T00:00:00.000000 |
| certa-2004-avi-265 | Vulnérabilité du noyau Linux | 2004-08-05T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-264 | Vulnérabilité dans la machine virtuelle Java (JRE) de SUN | 2004-08-05T00:00:00.000000 | 2004-10-22T00:00:00.000000 |
| certa-2004-avi-263 | Multiples vulnérabilités dans SquirrelMail | 2004-08-04T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-262 | Vulnérabilité dans le ScreenOS des pare-feux NetScreen | 2004-08-04T00:00:00.000000 | 2004-08-04T00:00:00.000000 |
| certa-2004-avi-261 | Vulnérabilité des navigateurs Netscape et Mozilla | 2004-08-03T00:00:00.000000 | 2004-08-03T00:00:00.000000 |
| certa-2004-avi-260 | Multiples vulnérabilités dans Internet Explorer | 2004-07-31T00:00:00.000000 | 2004-07-31T00:00:00.000000 |
| certa-2004-avi-259 | Vulnérabilité de KAME Racoon | 2004-07-30T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-258 | Vulnérabilité dans Checkpoint VPN-1 ASN.1 | 2004-07-29T00:00:00.000000 | 2004-07-29T00:00:00.000000 |
| certa-2004-avi-257 | Vulnérabilité de SoX | 2004-07-29T00:00:00.000000 | 2005-02-22T00:00:00.000000 |
| certa-2004-avi-256 | Vulnérabilité de subversion | 2004-07-28T00:00:00.000000 | 2004-07-28T00:00:00.000000 |
| certa-2004-avi-255 | Vulnérabilité de Pavuk | 2004-07-28T00:00:00.000000 | 2005-01-17T00:00:00.000000 |
| certa-2004-avi-254 | Multiples vulnérabilités sous HP-UX | 2004-07-27T00:00:00.000000 | 2004-07-27T00:00:00.000000 |
| certa-2004-avi-253 | Vulnérabilité du service RPC DCE | 2004-07-23T00:00:00.000000 | 2004-07-23T00:00:00.000000 |
| certa-2004-avi-252 | Vulnérabilité de Courier MTA, Courier-IMAP et Courier SqWebMail | 2004-07-23T00:00:00.000000 | 2004-07-23T00:00:00.000000 |
| certa-2004-avi-251 | Vulnérabilité de Samba | 2004-07-23T00:00:00.000000 | 2004-07-30T00:00:00.000000 |
| certa-2004-avi-250 | Vulnérabilités dans Cisco ONS 15000 | 2004-07-22T00:00:00.000000 | 2004-07-22T00:00:00.000000 |
| certa-2004-avi-249 | Vulnérabilité de Solaris Volume Manager | 2004-07-20T00:00:00.000000 | 2004-07-20T00:00:00.000000 |
| certa-2004-avi-248 | Vulnérabilité de l2tpd | 2004-07-19T00:00:00.000000 | 2004-07-22T00:00:00.000000 |
| certa-2004-avi-247 | Vulnérabilité du module Apache mod_ssl | 2004-07-16T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-246 | Vulnérabilité dans Novell BorderManager | 2004-07-16T00:00:00.000000 | 2004-07-16T00:00:00.000000 |