Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-102409 | 6.5 (v3.1) | Uncontrolled Recursion in Elasticsearch Leading to Den… |
Elastic |
Elasticsearch |
2026-10-06T19:31:40.592Z | 2026-10-06T19:55:40.589Z |
| cve-2026-102408 | 4.3 (v3.1) | Inefficient Regular Expression Complexity in Elasticse… |
Elastic |
Elasticsearch |
2026-10-06T19:31:39.196Z | 2026-10-06T19:56:06.441Z |
| cve-2026-102407 | 5.4 (v3.1) | Incorrect Authorization in Elasticsearch Leading to Un… |
Elastic |
Elasticsearch |
2026-10-06T19:31:37.820Z | 2026-10-06T19:56:32.845Z |
| cve-2026-102406 | 8.8 (v3.1) | Authorization Bypass Through User-Controlled Key in Ki… |
Elastic |
Kibana |
2026-10-06T19:31:36.178Z | 2026-10-08T03:55:50.031Z |
| cve-2026-102404 | 6.5 (v3.1) | Uncontrolled Resource Consumption in Elasticsearch Lea… |
Elastic |
Elasticsearch |
2026-10-06T19:31:34.716Z | 2026-10-06T19:57:23.769Z |
| cve-2026-96589 | N/A | Gitea private repository access retained after rejecte… |
Gitea |
Gitea |
2026-10-06T19:25:38.737Z | 2026-10-07T14:30:41.814Z |
| cve-2026-96580 | N/A | Gitea Actions memory exhaustion through large static m… |
Gitea |
Gitea |
2026-10-06T19:25:33.619Z | 2026-10-07T20:09:31.410Z |
| cve-2026-96404 | N/A | Gitea installer authentication bypass for existing accounts |
Gitea |
Gitea |
2026-10-06T19:25:28.457Z | 2026-10-07T14:26:56.170Z |
| cve-2026-96400 | N/A | Gitea migration SSRF to reserved addresses through ALL… |
Gitea |
Gitea |
2026-10-06T19:25:23.261Z | 2026-10-07T11:35:27.280Z |
| cve-2026-96399 | N/A | Gitea denial of service through external issue tracker… |
Gitea |
Gitea |
2026-10-06T19:25:18.075Z | 2026-10-07T20:10:45.979Z |
| cve-2026-95112 | N/A | Gitea issue reference parsing CPU exhaustion |
Gitea |
Gitea |
2026-10-06T19:25:12.973Z | 2026-10-08T12:26:17.597Z |
| cve-2026-94205 | N/A | Gitea fork workflow approval bypass through maintainer… |
Gitea |
Gitea |
2026-10-06T19:25:04.327Z | 2026-10-07T20:11:55.392Z |
| cve-2026-79960 | N/A | Gitea deploy key pushes acting as the repository owner |
Gitea |
Gitea |
2026-10-06T19:24:55.742Z | 2026-10-07T14:21:39.950Z |
| cve-2026-70357 | N/A | Gitea repository migration SSRF through DNS rebinding |
Gitea |
Gitea |
2026-10-06T19:24:50.540Z | 2026-10-07T20:12:56.425Z |
| cve-2026-104636 | N/A | Gitea SSRF through Git HTTP redirects in mirrors and fetches |
Gitea |
Gitea |
2026-10-06T19:24:45.427Z | 2026-10-07T20:13:59.342Z |
| cve-2026-76061 | 5.5 (v3.1) | Cri-o: cri-o: bind_mount_prefix intermediate-symlink p… |
|
|
2026-10-06T19:24:30.457Z | 2026-10-09T01:42:11.307Z |
| cve-2026-103504 | N/A | Gitea API team demotion not applied to unit permissions |
Gitea |
Gitea |
2026-10-06T19:24:26.369Z | 2026-10-07T20:15:03.095Z |
| cve-2026-95106 | N/A | Gitea review and execution mismatch through duplicate … |
Gitea |
Gitea |
2026-10-06T19:23:57.452Z | 2026-10-07T20:08:30.652Z |
| cve-2026-89430 | N/A | Gitea push mirror SSRF and forced writes to internal G… |
Gitea |
Gitea |
2026-10-06T19:23:52.198Z | 2026-10-07T20:16:04.169Z |
| cve-2026-103670 | N/A | Gitea trusted workflow cancellation by unapproved fork runs |
Gitea |
Gitea |
2026-10-06T19:23:40.050Z | 2026-10-07T15:58:09.298Z |
| cve-2026-103667 | N/A | Gitea container registry stored XSS through blob media type |
Gitea |
Gitea |
2026-10-06T19:23:34.873Z | 2026-10-07T20:17:12.875Z |
| cve-2026-101029 | N/A | Gitea migration and pull mirror SSRF through multi-ans… |
Gitea |
Gitea |
2026-10-06T19:23:26.328Z | 2026-10-07T20:18:20.660Z |
| cve-2026-101027 | N/A | Gitea migration SSRF through ALLOWED_DOMAINS address c… |
Gitea |
Gitea |
2026-10-06T19:23:20.387Z | 2026-10-07T15:54:52.293Z |
| cve-2026-104626 | N/A | Gitea fork workflow job revival through later approval |
Gitea |
Gitea |
2026-10-06T19:23:03.330Z | 2026-10-07T20:19:46.339Z |
| cve-2026-103059 | N/A | Gitea built-in SSH server authentication bypass throug… |
Gitea |
Gitea |
2026-10-06T19:22:57.192Z | 2026-10-07T14:17:20.596Z |
| cve-2026-104632 | N/A | Gitea fork workflow approval bypass through cancel and rerun |
Gitea |
Gitea |
2026-10-06T19:22:04.308Z | 2026-10-07T20:21:23.687Z |
| cve-2026-79818 | 5.3 (v3.1) | Authentication Bypass in the API Interface Allows Unau… |
Hewlett Packard Enterprise (HPE) |
ClearPass Policy Manager (CPPM) |
2026-10-06T19:17:19.720Z | 2026-10-07T17:57:48.208Z |
| cve-2026-79817 | 5.5 (v3.1) | Local Disclosure of Sensitive Information in HPE Netwo… |
Hewlett Packard Enterprise (HPE) |
ClearPass Policy Manager (CPPM) |
2026-10-06T19:17:18.816Z | 2026-10-07T17:58:32.343Z |
| cve-2026-79816 | 5.4 (v3.1) | Unauthenticated DOM-Based Cross-Site Scripting (XSS) V… |
Hewlett Packard Enterprise (HPE) |
ClearPass Policy Manager (CPPM) |
2026-10-06T19:17:17.988Z | 2026-10-07T17:59:13.019Z |
| cve-2026-79815 | 6.5 (v3.1) | Authenticated Command Injection Vulnerability in the C… |
Hewlett Packard Enterprise (HPE) |
ClearPass Policy Manager (CPPM) |
2026-10-06T19:17:17.033Z | 2026-10-07T17:59:59.434Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-275 | Multiples vulnérabilités dans CUPS | 2002-12-20T00:00:00.000000 | 2003-01-21T00:00:00.000000 |
| certa-2002-avi-274 | Vulnérabilité de Macromedia Flash Player | 2002-12-19T00:00:00.000000 | 2002-12-19T00:00:00.000000 |
| certa-2002-avi-273 | Vulnérabilité du langage de commande Windows XP | 2002-12-19T00:00:00.000000 | 2002-12-19T00:00:00.000000 |
| certa-2002-avi-272 | Multiples vulnérabilités de MySQL | 2002-12-19T00:00:00.000000 | 2003-01-16T00:00:00.000000 |
| certa-2002-avi-271 | Vulnérabilité de fetchmail | 2002-12-18T00:00:00.000000 | 2003-01-31T00:00:00.000000 |
| certa-2002-avi-270 | Vulnérabilité de Sun ONE / iPlanet Web Server sous Solaris (<TT>iPlanet Admin</TT>) | 2002-12-18T00:00:00.000000 | 2003-01-10T00:00:00.000000 |
| certa-2002-avi-269 | Vulnérabilité du module mod_jk du serveur web Apache | 2002-12-16T00:00:00.000000 | 2002-12-16T00:00:00.000000 |
| certa-2002-avi-268 | Vulnérabilité de tcpdump | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-267 | Vulnérabilité du serveur Sun Cobalt RaQ 4 | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-266 | Vulnérabilité dans SMB (Service Message Block) de Microsoft | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-265 | Multiples vulnérabilités de la Machine Virtuelle de Microsoft | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-264 | Vulnérabilité dans le traitement des messages WM_TIMER sous Windows | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-263 | Vulnérabilité de wget | 2002-12-12T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-262 | Vulnérabilité de priocntl sous Solaris | 2002-12-11T00:00:00.000000 | 2002-12-11T00:00:00.000000 |
| certa-2002-avi-261 | Vulnérabilité de FreeS/WAN sous Debian | 2002-12-06T00:00:00.000000 | 2002-12-06T00:00:00.000000 |
| certa-2002-avi-260 | Vulnérabilité d'Internet Explorer 5.5 et 6.0 | 2002-12-05T00:00:00.000000 | 2002-12-05T00:00:00.000000 |
| certa-2002-avi-259 | Vulnérabilité dans Microsoft Outlook | 2002-12-05T00:00:00.000000 | 2002-12-05T00:00:00.000000 |
| certa-2002-avi-258 | Vulnérabilités sur Sybase Adaptive Server | 2002-12-04T00:00:00.000000 | 2002-12-04T00:00:00.000000 |
| certa-2002-avi-257 | Multiples vulnérabilités dans les pare-feux Netscreen | 2002-12-02T00:00:00.000000 | 2002-12-02T00:00:00.000000 |
| certa-2002-avi-256 | Vulnérabilité du client de messagerie Pine | 2002-12-02T00:00:00.000000 | 2003-01-13T00:00:00.000000 |
| certa-2002-avi-255 | Vulnérabilité de kdelibs | 2002-12-02T00:00:00.000000 | 2002-12-06T00:00:00.000000 |
| certa-2002-avi-254 | Vulnérabilités dans le lecteur RealPlayer | 2002-12-02T00:00:00.000000 | 2002-12-02T00:00:00.000000 |
| certa-2002-avi-253 | Vulnérabilité de XFS (XWindow Font Server) | 2002-11-27T00:00:00.000000 | 2004-01-20T00:00:00.000000 |
| certa-2002-avi-252 | Vulnérabilité de Samba | 2002-11-25T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-251 | Vulnérabilité dans les commutateurs Alcatel OmniSwitch 7700/7800 AOS | 2002-11-22T00:00:00.000000 | 2002-11-22T00:00:00.000000 |
| certa-2002-avi-250 | Multiples vulnérabilités dans le garde-barrière PIX de CISCO | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-249 | Vulnérabilité des composants <TT>MDAC</TT> sous Microsoft Windows | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-248 | Correctif cumulatif pour Microsoft Internet Explorer | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-247 | Vulnérabilités de JRun et ColdFusion pour Microsoft IIS | 2002-11-15T00:00:00.000000 | 2002-11-15T00:00:00.000000 |
| certa-2002-avi-246 | Multiples vulnérabilités sur les serveurs DNS BIND 4 et 8 | 2002-11-13T00:00:00.000000 | 2002-11-19T00:00:00.000000 |