Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-58417 | N/A | REST API exposes organization membership of private or… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.004Z | 2026-08-14T17:34:38.917Z |
| cve-2026-58416 | N/A | Fork-PR Actions task can read a third private reposito… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.534Z | 2026-08-13T18:37:50.990Z |
| cve-2026-58314 | N/A | Two SSRF findings in Gitea 1.26.2 |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.109Z | 2026-08-14T17:35:42.167Z |
| cve-2026-57897 | N/A | Cross-Repo Information Disclosure via Org-Level Action… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.669Z | 2026-08-13T18:38:41.211Z |
| cve-2026-57894 | N/A | Repository Migration Follows Git HTTP Redirects After … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.204Z | 2026-08-14T17:36:49.613Z |
| cve-2026-57886 | N/A | Cross-repository issue/comment attachment re-linking c… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.704Z | 2026-08-14T17:38:03.588Z |
| cve-2026-56755 | N/A | Denial of Service (CPU & Memory Exhaustion) via O(N^2)… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.222Z | 2026-08-13T18:38:14.713Z |
| cve-2026-56750 | N/A | Gitea Remember-Me Token Theft Not Invalidating Attacke… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.788Z | 2026-08-14T19:18:19.475Z |
| cve-2026-56657 | N/A | Gitea SSH Key Parser Denial of Service |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.329Z | 2026-08-13T18:48:49.731Z |
| cve-2026-56654 | N/A | Privilege Escalation via Access Token Scope Escalation… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.890Z | 2026-08-14T19:19:59.583Z |
| cve-2026-56443 | N/A | Token public-only scope bypassed on Limited-visibility… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.458Z | 2026-08-14T20:05:01.023Z |
| cve-2026-55987 | N/A | OAuth2 sign-in reactivates an administrator-deactivate… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.020Z | 2026-08-14T20:06:36.724Z |
| cve-2026-55986 | N/A | Email Management API Bypasses ManageCredentials Featur… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:41.580Z | 2026-08-14T18:29:12.328Z |
| cve-2026-55984 | N/A | Null Pointer Dereference in AddTime API Causes Authent… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:40.619Z | 2026-08-14T17:40:25.217Z |
| cve-2026-55982 | N/A | OIDC userinfo Endpoint Returns Identity Claims Without… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:40.177Z | 2026-08-14T17:42:09.138Z |
| cve-2026-54481 | N/A | Internal API HTTP client hardcodes InsecureSkipVerify:… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:39.761Z | 2026-08-14T17:44:39.896Z |
| cve-2026-50105 | N/A | RSS/Atom feed handlers bypass API-token scope & public… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:39.331Z | 2026-08-14T20:08:02.697Z |
| cve-2026-42931 | N/A | Denial of Service via Unbounded io.ReadAll in NPM Pack… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:38.891Z | 2026-08-13T19:28:56.414Z |
| cve-2026-23603 | N/A | Blind SSRF in OAuth2 avatar synchronization via unvali… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:38.451Z | 2026-08-14T17:45:37.628Z |
| cve-2026-59109 | 8.8 (v3.1) 8.7 (v4.0) | Zalktis: SQL injection via partner-controlled fields i… |
Zalktis Programmas (SIA "Zalktis Programmas") |
Zalktis |
2026-08-13T16:40:01.751Z | 2026-08-14T17:46:15.377Z |
| cve-2026-73266 | 7.1 (v3.1) | Clusterclaims-controller: confused deputy: tenant-cont… |
Red Hat |
multicluster engine for Kubernetes 2.1 |
2026-08-13T16:36:45.097Z | 2026-09-08T12:15:14.168Z |
| cve-2026-13051 | N/A | Form::Processor::Field::HtmlArea versions from 0.06 th… |
|
|
2026-08-13T16:28:50.242Z | 2026-08-14T17:47:10.542Z |
| cve-2026-13048 | N/A | Data::MuForm::Localizer versions through 0.05 for Perl… |
|
|
2026-08-13T16:28:25.637Z | 2026-08-14T11:31:42.090Z |
| cve-2022-4993 | N/A | HTML::FormHandler versions before 0.410000 for Perl al… |
|
|
2026-08-13T16:27:47.498Z | 2026-09-08T20:07:45.843Z |
| cve-2026-55402 | 8.7 (v4.0) | CVE-2026-55402 is an out of bounds read vulnerabi… |
Absolute Security |
Secure Access |
2026-08-13T16:16:22.160Z | 2026-08-13T19:02:45.126Z |
| cve-2026-55401 | 6.9 (v4.0) | CVE-2026-55401 is a null dereference vulnerabilit… |
Absolute Security |
Secure Access |
2026-08-13T16:11:08.672Z | 2026-08-13T19:03:32.732Z |
| cve-2026-55400 | 6 (v4.0) | CVE-2026-55400 is an integer underflow in Secure … |
Absolute Security |
Secure Access |
2026-08-13T16:05:10.423Z | 2026-08-13T18:50:28.496Z |
| cve-2026-73532 | 9.3 (v4.0) 9.8 (v3.1) | Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tam… |
WPManageNinja |
Fluent Forms Pro |
2026-08-13T16:01:19.629Z | 2026-08-14T16:48:08.232Z |
| cve-2026-73533 | 9.3 (v4.0) 9.8 (v3.1) | Ninja Tables Pro 5.2.11 Embedded Malicious Code via Ta… |
WPManageNinja |
Ninja Tables Pro |
2026-08-13T16:00:48.030Z | 2026-08-17T15:08:31.482Z |
| cve-2026-73671 | 5.1 (v4.0) 6.1 (v3.1) | Saurus CMS Unauthenticated Open Redirect via logout ur… |
Saurus |
Saurus CMS Community Edition |
2026-08-13T16:00:13.326Z | 2026-08-14T16:52:45.176Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-245 | Vulnérabilité dans FreeS/Wan, Openswan, StrongSwan et Super FreeS/Wan | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-244 | Vulnérabilité de PHP | 2004-07-15T00:00:00.000000 | 2005-03-01T00:00:00.000000 |
| certa-2004-avi-243 | Vulnérabilité de la bibliothèque wv | 2004-07-15T00:00:00.000000 | 2004-07-30T00:00:00.000000 |
| certa-2004-avi-242 | Vulnérabilité dans l'interpréteur de commandes Windows | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-241 | Vulnérabilités dans les fichiers d'aide HTML de Microsoft | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-240 | Vulnérabilité dans Microsoft Windows Task Scheduler | 2004-07-15T00:00:00.000000 | 2004-07-16T00:00:00.000000 |
| certa-2004-avi-239 | Vulnérabilité dans Microsoft Internet Information Server (IIS) 4.0 | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-238 | Vulnérabilité du composant POSIX de Microsoft | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-237 | Vulnérabilité dans Utility Manager sous Windows | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-236 | Vulnérabilité dans Microsoft Outlook Express | 2004-07-15T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-235 | Vulnérabilité d'Adobe Acrobat et d'Adobe Reader | 2004-07-13T00:00:00.000000 | 2004-07-13T00:00:00.000000 |
| certa-2004-avi-234 | Faille dans le serveur SSLtelnet | 2004-07-09T00:00:00.000000 | 2004-07-19T00:00:00.000000 |
| certa-2004-avi-233 | Vulnérabilité dans Shorewall | 2004-07-09T00:00:00.000000 | 2004-07-09T00:00:00.000000 |
| certa-2004-avi-232 | Vulnérabilité de la suite Mozilla sous Windows XP | 2004-07-09T00:00:00.000000 | 2004-07-09T00:00:00.000000 |
| certa-2004-avi-231 | Vulnérabilité de plusieurs navigateurs | 2004-07-08T00:00:00.000000 | 2004-07-26T00:00:00.000000 |
| certa-2004-avi-230 | Vulnérabilité dans le module de sécurité BSM sur Solaris | 2004-07-07T00:00:00.000000 | 2004-07-07T00:00:00.000000 |
| certa-2004-avi-229 | Vulnérabilité de nCipher netHSM | 2004-07-07T00:00:00.000000 | 2004-07-07T00:00:00.000000 |
| certa-2004-avi-228 | Vulnérabilités dans Ethereal | 2004-07-07T00:00:00.000000 | 2004-08-06T00:00:00.000000 |
| certa-2004-avi-227 | Vulnérabilité dans les pare-feux NetScreen 5GT | 2004-07-06T00:00:00.000000 | 2004-07-06T00:00:00.000000 |
| certa-2004-avi-226 | Vulnérabilité de WinGate | 2004-07-06T00:00:00.000000 | 2004-07-06T00:00:00.000000 |
| certa-2004-avi-225 | Multiples vulnérabilités du noyau Linux | 2004-07-06T00:00:00.000000 | 2004-07-22T00:00:00.000000 |
| certa-2004-avi-224 | Vulnérabilité de netfilter dans les noyaux Linux 2.6 | 2004-07-06T00:00:00.000000 | 2004-07-15T00:00:00.000000 |
| certa-2004-avi-223 | Vulnérabilité de MySQL | 2004-07-06T00:00:00.000000 | 2004-07-06T00:00:00.000000 |
| certa-2004-avi-222 | Vulnérabilité dans le JUNOS de Juniper | 2004-07-06T00:00:00.000000 | 2004-07-06T00:00:00.000000 |
| certa-2004-avi-221 | Vulnérabilité de GNATS | 2004-07-05T00:00:00.000000 | 2004-07-05T00:00:00.000000 |
| certa-2004-avi-220 | Vulnérabilité dans la gestion d'appels système sous FreeBSD | 2004-07-05T00:00:00.000000 | 2004-07-05T00:00:00.000000 |
| certa-2004-avi-219 | Multiples vulnérabilités de rlpr | 2004-07-02T00:00:00.000000 | 2004-07-02T00:00:00.000000 |
| certa-2004-avi-218 | Vulnérabilité dans Cisco Collaboration Server | 2004-07-02T00:00:00.000000 | 2004-07-02T00:00:00.000000 |
| certa-2004-avi-217 | Vulnérabilités dans MPlayer | 2004-07-02T00:00:00.000000 | 2004-08-02T00:00:00.000000 |
| certa-2004-avi-216 | Vulnérabilité de pavuk | 2004-07-01T00:00:00.000000 | 2004-07-05T00:00:00.000000 |