Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-24791 | N/A | Public-only tokens bypass private-resource restriction… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:48:52.255Z | 2026-08-13T18:48:01.037Z |
| cve-2026-59765 | N/A | SSRF via Migration Asset Downloads Bypasses hostmatche… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:59.148Z | 2026-08-14T19:01:54.065Z |
| cve-2026-59763 | N/A | Unbounded Arch package file metadata can cause resourc… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.792Z | 2026-08-13T18:49:48.864Z |
| cve-2026-58511 | N/A | Webhook Authorization Header Returned in Plaintext via API |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.442Z | 2026-08-13T18:50:39.280Z |
| cve-2026-58510 | N/A | GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.092Z | 2026-08-13T19:14:00.411Z |
| cve-2026-58508 | N/A | Two SSRF vulnerabilities in Gitea migration/mirror (DN… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.726Z | 2026-08-14T19:04:47.409Z |
| cve-2026-58507 | N/A | Private Repository Existence Disclosure via go-get Met… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.367Z | 2026-08-14T19:06:32.423Z |
| cve-2026-58445 | N/A | Cross-repository label-ID enumeration oracle via unsco… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.978Z | 2026-08-14T19:08:41.522Z |
| cve-2026-58444 | N/A | Personal access token scope enforcement bypass on the … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.429Z | 2026-08-14T19:10:48.309Z |
| cve-2026-58443 | N/A | Public-only repository tokens can update private PR he… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.935Z | 2026-08-14T19:53:05.549Z |
| cve-2026-58442 | N/A | Repository migration SSRF via multi-answer DNS allow-l… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:55.444Z | 2026-08-14T19:55:16.172Z |
| cve-2026-58441 | N/A | SSRF in restore-repo via unsanitized pull_request.yml … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.967Z | 2026-08-14T19:57:53.325Z |
| cve-2026-58440 | N/A | Webhooks created by a collaborator keep firing after t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:54.496Z | 2026-08-14T19:59:35.049Z |
| cve-2026-58439 | N/A | Branch Protection Bypass via PR Retargeting Preserves … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.887Z | 2026-08-14T20:01:50.699Z |
| cve-2026-58438 | N/A | Cross-repository IDOR in issue-dependency removal lets… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:53.141Z | 2026-08-14T20:03:20.000Z |
| cve-2026-58437 | N/A | Repository Visibility Manipulation via Git Push Options |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.661Z | 2026-08-14T19:12:37.154Z |
| cve-2026-58436 | N/A | ParseAcceptLanguage quadratic-time DoS via Locale midd… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:52.210Z | 2026-08-14T17:14:59.535Z |
| cve-2026-58435 | N/A | Gitea LFS Deploy-Key Privilege Escalation |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.733Z | 2026-08-14T17:20:22.792Z |
| cve-2026-58434 | N/A | Private Repository Metadata Remains Accessible After A… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:51.261Z | 2026-08-14T17:22:41.943Z |
| cve-2026-58433 | N/A | Team-repository linking endpoint bypasses the RepoAdmi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.794Z | 2026-08-14T19:14:15.445Z |
| cve-2026-58432 | N/A | Missing Authorization and Authorization Bypass Through… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.340Z | 2026-08-14T19:16:44.337Z |
| cve-2026-58431 | N/A | Public-only API token restriction is not enforced on t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.923Z | 2026-08-14T17:24:33.805Z |
| cve-2026-58429 | N/A | Public-Only Personal access tokens scope bypass in Org… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.484Z | 2026-08-14T17:28:06.995Z |
| cve-2026-58428 | N/A | Release attachment extension allowlist bypass via web … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.015Z | 2026-08-14T17:29:36.605Z |
| cve-2026-58427 | N/A | Private org member list leaked via /members API endpoi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:48.425Z | 2026-08-14T17:30:58.822Z |
| cve-2026-58425 | N/A | OAuth token introspection returns metadata of tokens i… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.902Z | 2026-08-14T17:33:14.150Z |
| cve-2026-58420 | N/A | Local File Inclusion via file:// URI in Migration Restore |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.452Z | 2026-08-14T17:43:31.912Z |
| cve-2026-58417 | N/A | REST API exposes organization membership of private or… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.004Z | 2026-08-14T17:34:38.917Z |
| cve-2026-58416 | N/A | Fork-PR Actions task can read a third private reposito… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.534Z | 2026-08-13T18:37:50.990Z |
| cve-2026-58314 | N/A | Two SSRF findings in Gitea 1.26.2 |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.109Z | 2026-08-14T17:35:42.167Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-095 | Multiples vulnérabilités d'OpenSSL | 2004-03-18T00:00:00.000000 | 2004-05-07T00:00:00.000000 |
| certa-2004-avi-094 | Vulnérabilité sur plusieurs serveurs SOAP | 2004-03-18T00:00:00.000000 | 2004-03-18T00:00:00.000000 |
| certa-2004-avi-093 | Vulnérabilité de Solaris | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-092 | Vulnérabilité de IPsec/IKE sous Tru64 UNIX | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-091 | Compromission possible de certificats sur <SPAN class="textit">HP HTTP Server</SPAN> | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-090 | Vulnérabilité dans Oracle Application Server Web Cache | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-089 | Vulnérabilité sur Novell GroupWise WebAccess | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-088 | Vulnérabilité du serveur SAMBA | 2004-03-15T00:00:00.000000 | 2004-04-30T00:00:00.000000 |
| certa-2004-avi-087 | Vulnérabilité de Antigen pour Lotus Domino | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-086 | Vulnérabilité du serveur HTTP Apache | 2004-03-15T00:00:00.000000 | 2004-05-18T00:00:00.000000 |
| certa-2004-avi-085 | Vulnérabilité de sysstat | 2004-03-15T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-084 | Vulnérabilité de Calife | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-083 | Vulnérabilité de rexecd sous AIX | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-082 | Vulnérabilité de F-Secure pour Linux | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-081 | Vulnérabilité du navigateur Konqueror | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-080 | Multiples vulnérabilités dans Mozilla | 2004-03-11T00:00:00.000000 | 2004-05-14T00:00:00.000000 |
| certa-2004-avi-079 | Vulnérabilité du serveur HTTP Apache | 2004-03-11T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-078 | Vulnérabilité sur gdk-pixbuf sous Linux | 2004-03-11T00:00:00.000000 | 2004-03-16T00:00:00.000000 |
| certa-2004-avi-077 | Vulnérabilités de uucp sous Sun Solaris | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-076 | Python 2.2 : Débordement de variable dans la gestion des réponses du DNS | 2004-03-10T00:00:00.000000 | 2004-09-03T00:00:00.000000 |
| certa-2004-avi-075 | Vulnérabilité dans la pile TCP/IP de OpenBSD | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-074 | Vulnérabilités du serveur wu-ftpd | 2004-03-10T00:00:00.000000 | 2004-07-17T00:00:00.000000 |
| certa-2004-avi-073 | Vulnérabilité dans Microsoft MSN Messenger | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-072 | Vulnérabilité dans Microsoft Outlook | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-071 | Vulnérabilité dans Windows Media Services | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-070 | Vulnérabilité dans le gestionnaire de base de données IBM DB2 | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-069 | Vulnérabilité de la commande passwd sur Sun | 2004-03-08T00:00:00.000000 | 2004-03-08T00:00:00.000000 |
| certa-2004-avi-068 | Vulnérabilité sur les produits VPN NetScreen 5000 | 2004-03-05T00:00:00.000000 | 2004-03-05T00:00:00.000000 |
| certa-2004-avi-067 | Déni de service des commutateurs Cisco CSS 11000 | 2004-03-05T00:00:00.000000 | 2004-03-05T00:00:00.000000 |
| certa-2004-avi-066 | Vulnérabilité dans le serveur WFTPD pour Windows | 2004-03-04T00:00:00.000000 | 2004-03-04T00:00:00.000000 |