|
cve-2026-18428
|
8.7 (v4.0)
8.8 (v3.1)
|
SQL Query Validation Bypass in OpenSearch Direct Query
|
AWS
|
Opensearch
|
2026-08-13T17:32:48.455Z |
2026-08-13T17:57:51.408Z |
|
cve-2026-73563
|
|
Backstage: Unauthenticated OAuth account takeover via …
|
backstage
|
backstage
|
2026-08-13T17:32:39.535Z |
2026-08-13T18:07:45.624Z |
|
cve-2026-73562
|
|
Mongoose: Prototype pollution in the update casting vi…
|
Automattic
|
mongoose
|
2026-08-13T17:27:09.914Z |
2026-08-14T18:09:27.112Z |
|
cve-2026-73561
|
|
Hub: Unauthenticated WebSocket RPC Waiter Resource Exh…
|
anephenix
|
hub
|
2026-08-13T17:24:34.761Z |
2026-08-18T01:27:12.169Z |
|
cve-2019-25765
|
8.7 (v4.0)
7.5 (v3.1)
|
ASP-CMS SQL Injection via commentList.asp id Parameter
|
ASP-CMS Project
|
ASP-CMS
|
2026-08-13T17:21:38.584Z |
2026-08-14T18:48:07.536Z |
|
cve-2024-58374
|
8.7 (v4.0)
7.5 (v3.1)
|
Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree
|
Hongjing Century
|
e-HR
|
2026-08-13T17:21:22.909Z |
2026-08-13T17:56:17.621Z |
|
cve-2026-12236
|
6.5 (v3.1)
|
Infinite loop (DoS) in Bluetooth GATT client parsing o…
|
zephyrproject
|
zephyr
|
2026-08-13T17:19:58.346Z |
2026-08-13T17:58:32.374Z |
|
cve-2026-67613
|
6.9 (v4.0)
4.9 (v3.1)
|
CyberPanel < 3.0.0 Path Traversal File Read via cloudA…
|
usmannasir
|
cyberpanel
|
2026-08-13T17:09:05.229Z |
2026-08-14T18:09:34.128Z |
|
cve-2026-67614
|
9.3 (v4.0)
9.8 (v3.1)
|
CyberPanel < 3.0.0 Hard-coded JWT Secret Authenticatio…
|
usmannasir
|
cyberpanel
|
2026-08-13T17:08:40.038Z |
2026-08-14T16:51:02.511Z |
|
cve-2026-24059
|
N/A
|
Gitea runner registration-token GET endpoint performs …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:48:52.623Z |
2026-08-14T17:10:45.377Z |
|
cve-2026-24791
|
N/A
|
Public-only tokens bypass private-resource restriction…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:48:52.255Z |
2026-08-13T18:48:01.037Z |
|
cve-2026-59765
|
N/A
|
SSRF via Migration Asset Downloads Bypasses hostmatche…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:59.148Z |
2026-08-14T19:01:54.065Z |
|
cve-2026-59763
|
N/A
|
Unbounded Arch package file metadata can cause resourc…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:58.792Z |
2026-08-13T18:49:48.864Z |
|
cve-2026-58511
|
N/A
|
Webhook Authorization Header Returned in Plaintext via API
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:58.442Z |
2026-08-13T18:50:39.280Z |
|
cve-2026-58510
|
N/A
|
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied t…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:58.092Z |
2026-08-13T19:14:00.411Z |
|
cve-2026-58508
|
N/A
|
Two SSRF vulnerabilities in Gitea migration/mirror (DN…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:57.726Z |
2026-08-14T19:04:47.409Z |
|
cve-2026-58507
|
N/A
|
Private Repository Existence Disclosure via go-get Met…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:57.367Z |
2026-08-14T19:06:32.423Z |
|
cve-2026-58445
|
N/A
|
Cross-repository label-ID enumeration oracle via unsco…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:56.978Z |
2026-08-14T19:08:41.522Z |
|
cve-2026-58444
|
N/A
|
Personal access token scope enforcement bypass on the …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:56.429Z |
2026-08-14T19:10:48.309Z |
|
cve-2026-58443
|
N/A
|
Public-only repository tokens can update private PR he…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:55.935Z |
2026-08-14T19:53:05.549Z |
|
cve-2026-58442
|
N/A
|
Repository migration SSRF via multi-answer DNS allow-l…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:55.444Z |
2026-08-14T19:55:16.172Z |
|
cve-2026-58441
|
N/A
|
SSRF in restore-repo via unsanitized pull_request.yml …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:54.967Z |
2026-08-14T19:57:53.325Z |
|
cve-2026-58440
|
N/A
|
Webhooks created by a collaborator keep firing after t…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:54.496Z |
2026-08-14T19:59:35.049Z |
|
cve-2026-58439
|
N/A
|
Branch Protection Bypass via PR Retargeting Preserves …
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:53.887Z |
2026-08-14T20:01:50.699Z |
|
cve-2026-58438
|
N/A
|
Cross-repository IDOR in issue-dependency removal lets…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:53.141Z |
2026-08-14T20:03:20.000Z |
|
cve-2026-58437
|
N/A
|
Repository Visibility Manipulation via Git Push Options
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:52.661Z |
2026-08-14T19:12:37.154Z |
|
cve-2026-58436
|
N/A
|
ParseAcceptLanguage quadratic-time DoS via Locale midd…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:52.210Z |
2026-08-14T17:14:59.535Z |
|
cve-2026-58435
|
N/A
|
Gitea LFS Deploy-Key Privilege Escalation
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:51.733Z |
2026-08-14T17:20:22.792Z |
|
cve-2026-58434
|
N/A
|
Private Repository Metadata Remains Accessible After A…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:51.261Z |
2026-08-14T17:22:41.943Z |
|
cve-2026-58433
|
N/A
|
Team-repository linking endpoint bypasses the RepoAdmi…
|
Gitea
|
Gitea Open Source Git Server
|
2026-08-13T16:44:50.794Z |
2026-08-14T19:14:15.445Z |