Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-58433 | N/A | Team-repository linking endpoint bypasses the RepoAdmi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.794Z | 2026-08-14T19:14:15.445Z |
| cve-2026-58432 | N/A | Missing Authorization and Authorization Bypass Through… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:50.340Z | 2026-08-14T19:16:44.337Z |
| cve-2026-58431 | N/A | Public-only API token restriction is not enforced on t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.923Z | 2026-08-14T17:24:33.805Z |
| cve-2026-58429 | N/A | Public-Only Personal access tokens scope bypass in Org… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.484Z | 2026-08-14T17:28:06.995Z |
| cve-2026-58428 | N/A | Release attachment extension allowlist bypass via web … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:49.015Z | 2026-08-14T17:29:36.605Z |
| cve-2026-58427 | N/A | Private org member list leaked via /members API endpoi… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:48.425Z | 2026-08-14T17:30:58.822Z |
| cve-2026-58425 | N/A | OAuth token introspection returns metadata of tokens i… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.902Z | 2026-08-14T17:33:14.150Z |
| cve-2026-58420 | N/A | Local File Inclusion via file:// URI in Migration Restore |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.452Z | 2026-08-14T17:43:31.912Z |
| cve-2026-58417 | N/A | REST API exposes organization membership of private or… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:47.004Z | 2026-08-14T17:34:38.917Z |
| cve-2026-58416 | N/A | Fork-PR Actions task can read a third private reposito… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.534Z | 2026-08-13T18:37:50.990Z |
| cve-2026-58314 | N/A | Two SSRF findings in Gitea 1.26.2 |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:46.109Z | 2026-08-14T17:35:42.167Z |
| cve-2026-57897 | N/A | Cross-Repo Information Disclosure via Org-Level Action… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.669Z | 2026-08-13T18:38:41.211Z |
| cve-2026-57894 | N/A | Repository Migration Follows Git HTTP Redirects After … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:45.204Z | 2026-08-14T17:36:49.613Z |
| cve-2026-57886 | N/A | Cross-repository issue/comment attachment re-linking c… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.704Z | 2026-08-14T17:38:03.588Z |
| cve-2026-56755 | N/A | Denial of Service (CPU & Memory Exhaustion) via O(N^2)… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:44.222Z | 2026-08-13T18:38:14.713Z |
| cve-2026-56750 | N/A | Gitea Remember-Me Token Theft Not Invalidating Attacke… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.788Z | 2026-08-14T19:18:19.475Z |
| cve-2026-56657 | N/A | Gitea SSH Key Parser Denial of Service |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:43.329Z | 2026-08-13T18:48:49.731Z |
| cve-2026-56654 | N/A | Privilege Escalation via Access Token Scope Escalation… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.890Z | 2026-08-14T19:19:59.583Z |
| cve-2026-56443 | N/A | Token public-only scope bypassed on Limited-visibility… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.458Z | 2026-08-14T20:05:01.023Z |
| cve-2026-55987 | N/A | OAuth2 sign-in reactivates an administrator-deactivate… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:42.020Z | 2026-08-14T20:06:36.724Z |
| cve-2026-55986 | N/A | Email Management API Bypasses ManageCredentials Featur… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:41.580Z | 2026-08-14T18:29:12.328Z |
| cve-2026-55984 | N/A | Null Pointer Dereference in AddTime API Causes Authent… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:40.619Z | 2026-08-14T17:40:25.217Z |
| cve-2026-55982 | N/A | OIDC userinfo Endpoint Returns Identity Claims Without… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:40.177Z | 2026-08-14T17:42:09.138Z |
| cve-2026-54481 | N/A | Internal API HTTP client hardcodes InsecureSkipVerify:… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:39.761Z | 2026-08-14T17:44:39.896Z |
| cve-2026-50105 | N/A | RSS/Atom feed handlers bypass API-token scope & public… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:39.331Z | 2026-08-14T20:08:02.697Z |
| cve-2026-42931 | N/A | Denial of Service via Unbounded io.ReadAll in NPM Pack… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:38.891Z | 2026-08-13T19:28:56.414Z |
| cve-2026-23603 | N/A | Blind SSRF in OAuth2 avatar synchronization via unvali… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:38.451Z | 2026-08-14T17:45:37.628Z |
| cve-2026-59109 | 8.8 (v3.1) 8.7 (v4.0) | Zalktis: SQL injection via partner-controlled fields i… |
Zalktis Programmas (SIA "Zalktis Programmas") |
Zalktis |
2026-08-13T16:40:01.751Z | 2026-08-14T17:46:15.377Z |
| cve-2026-73266 | 7.1 (v3.1) | Clusterclaims-controller: confused deputy: tenant-cont… |
Red Hat |
multicluster engine for Kubernetes 2.1 |
2026-08-13T16:36:45.097Z | 2026-09-08T12:15:14.168Z |
| cve-2026-13051 | N/A | Form::Processor::Field::HtmlArea versions from 0.06 th… |
|
|
2026-08-13T16:28:50.242Z | 2026-08-14T17:47:10.542Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-065 | Vulnérabilité d'Adobe Acrobat Reader | 2004-03-04T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-064 | Vulnérabilité sur Proftpd | 2004-03-04T00:00:00.000000 | 2004-03-04T00:00:00.000000 |
| certa-2004-avi-063 | Vulnérabilité dans Symantec Gateway Security | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-062 | Vulnérabilité de Squid | 2004-03-03T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-061 | Vulnérabilité de UUDeview | 2004-03-03T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-060 | Vulnérabilité sur Novell Client Firewall 2.x | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-059 | Déni de service sous FreeBSD | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-058 | Vulnérabilité des mtools sous Unix | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-057 | Vulnérabilité sur jail_attach sous FreeBSD | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-056 | Vulnérabilité de WinZip | 2004-03-01T00:00:00.000000 | 2004-03-16T00:00:00.000000 |
| certa-2004-avi-055 | Vulnérabilité de la commande conv_fix de Solaris | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-054 | Vulnérabilité de la commande passwd sous Solaris | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-053 | Vulnérabilité des produits Proventia, BlackICE et RealSecure d'ISS | 2004-02-27T00:00:00.000000 | 2004-02-27T00:00:00.000000 |
| certa-2004-avi-052 | Vulnérabilité dans le navigateur Mozilla | 2004-02-27T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-051 | Vulnérabilité de la bibliothèque libxml2 | 2004-02-27T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-050 | Vulnérabilité sur le module mod_python du serveur HTTP Apache | 2004-02-27T00:00:00.000000 | 2004-05-13T00:00:00.000000 |
| certa-2004-avi-049 | Vulnérabilité dans nCipher | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2004-avi-048 | Vulnérabilités sur Trillian | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2004-avi-047 | Multiples vulnérabilités sous Mac OS X | 2004-02-25T00:00:00.000000 | 2004-02-25T00:00:00.000000 |
| certa-2004-avi-046 | Vulnérabilité dans Oracle9i Application et Dabase Server | 2004-02-23T00:00:00.000000 | 2004-02-23T00:00:00.000000 |
| certa-2004-avi-045 | Vulnérabilité dans Ipswitch Imail Server | 2004-02-20T00:00:00.000000 | 2004-02-20T00:00:00.000000 |
| certa-2004-avi-044 | Vulnérabilité de plusieurs logiciels de Zone Labs | 2004-02-19T00:00:00.000000 | 2004-02-19T00:00:00.000000 |
| certa-2004-avi-043 | Vulnérabilité de Metamail | 2004-02-19T00:00:00.000000 | 2004-05-24T00:00:00.000000 |
| certa-2004-avi-042 | Vulnérabilité du noyau linux | 2004-02-18T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-041 | Vulnérabilité de Clamav | 2004-02-18T00:00:00.000000 | 2004-02-18T00:00:00.000000 |
| certa-2004-avi-357 | Vulnérabilités du lecteur PDF xpdf et de ses dérivés et du service d'impression CUPS | 2004-02-17T00:00:00.000000 | 2004-11-26T00:00:00.000000 |
| certa-2004-avi-040 | Vulnérabilité de eTrust Antivirus | 2004-02-16T00:00:00.000000 | 2004-02-16T00:00:00.000000 |
| certa-2004-avi-039 | Vulnérabilités dans Sophos Anti-Virus | 2004-02-16T00:00:00.000000 | 2004-02-16T00:00:00.000000 |
| certa-2004-avi-038 | Vulnérabilité dans le serveur samba | 2004-02-13T00:00:00.000000 | 2004-06-09T00:00:00.000000 |
| certa-2004-avi-037 | Vulnérabilités de la bibliothèque PWLib | 2004-02-13T00:00:00.000000 | 2004-05-13T00:00:00.000000 |