CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-118395 HIGH · 7.5 Gitea 1.27.3 stopped personal access tokens restricted to public resources (`public-only`) from creating repositories through `POST /api/v1/user/repos` and `POST /api/v1/repos/migrate`, but `POST /api/v1/org/{org}/repos`, `POST /api/v1/orgs/{org}/repos`,…
- CVE-2026-118394 MEDIUM · 4.3 The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public organizations by re-parsing the `Authorization` header as an OAuth2 access token…
- CVE-2026-118386 MEDIUM · 6.5 Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork restrictions were decided by the…
- CVE-2026-117685 CRITICAL · 9.1 The OCI registry's cross-repository blob mount checked the target package against the token's `public-only` restriction, but checked the source blob only against the full account…
- CVE-2026-117677 NONE When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for `Chart.yaml` without limiting the decompressed size, and…
- CVE-2026-117649 LOW · 3.5 The issue timeline API and the web issue page hid cross-reference events that point at issues the reader cannot access, but not "dependency added" and…
- CVE-2026-117646 MEDIUM · 4.3 The repositories, stars and watching tabs of user profiles and the repository list of organization home pages included private repositories for every signed-in request without…
- CVE-2026-117635 MEDIUM · 6.5 The `/api/v1/admin` route group did not enforce the `public-only` restriction of personal access tokens. A public-only token with admin scope issued by a site administrator…
- CVE-2026-116474 MEDIUM · 6.5 The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-actions` system user, and the `/api/v1/user` email and GPG key endpoints accepted that user, so…
- CVE-2026-116296 MEDIUM · 6.5 The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an…
- CVE-2026-116289 CRITICAL · 9.1 Gitea did not reject personal access tokens restricted to public resources (`public-only`) on the organization Actions runner registration-token endpoint, and the runner registered with the…
- CVE-2026-114199 MEDIUM · 5.3 `GET /api/v1/users/{username}/heatmap` computed the contribution heatmap with the repository access of the token owner and ignored the public-only restriction of the access token, unlike the…
- CVE-2026-113429 MEDIUM · 5.4 Legacy (v1 to v3) Actions artifact uploads stored the request's `Content-Encoding` header unchecked in the column that is served as the artifact's `Content-Type` on download,…
- CVE-2026-112887 MEDIUM · 4.3 Gitea Actions task tokens authenticate to the REST API as a shared system user with a negative ID, which repository, organization, project and key filters…
- CVE-2026-120218 LOW · 3.5 A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can…
- CVE-2026-120217 MEDIUM · 4.3 A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Parser.…
- CVE-2026-120196 CRITICAL · 9.9 A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in…
- CVE-2026-120195 CRITICAL · 10.0 A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial…
- CVE-2026-120251 MEDIUM · 5.5 imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a crafted CCITT Group…
- CVE-2026-120247 MEDIUM · 5.5 FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels…
- CVE-2026-120250 MEDIUM · 5.3 OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and utils/email_debug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS.…
- CVE-2026-120246 MEDIUM · 5.5 FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM…
- CVE-2026-120243 MEDIUM · 5.5 FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette…
- CVE-2026-120190 LOW · 3.5 A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-forms/form-components/DescriptionInput.tsx of…
- CVE-2026-120189 CRITICAL · 10.0 A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The…
- CVE-2026-115946 NONE XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static…
- CVE-2026-120135 NONE Uncontrolled Recursion vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes…
- CVE-2026-118636 CRITICAL · 9.8 **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an application that puts it…
- CVE-2026-118147 HIGH · 7.4 Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-120210 MEDIUM · 4.3 FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP…
- CVE-2026-120207 HIGH · 7.1 Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page tags, documents and images by abusing back-office…
- CVE-2026-120203 HIGH · 8.8 ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers…
- CVE-2026-120206 MEDIUM · 5.9 Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge administrative actions because per-session CSRF tokens leak…
- CVE-2026-120202 MEDIUM · 6.5 Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories…
- CVE-2026-120199 MEDIUM · 4.3 LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can…
- CVE-2026-102212 NONE Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash…
- CVE-2026-78192 HIGH · 7.5 WebDyne versions from 2.022 before 3.022 for Perl disclose application source to unauthenticated clients via the viewer in the default index page. WebDyne's wrapper scripts,…
- CVE-2026-78191 CRITICAL · 9.8 WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a…
- CVE-2026-78190 MEDIUM · 6.1 WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting. The textfield, password_field and filefield tags…
- CVE-2026-78189 CRITICAL · 9.8 WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback. When…
- CVE-2026-78188 MEDIUM · 5.4 WebDyne versions from 2.014 before 3.022 for Perl issue session cookies without the Secure, HttpOnly and SameSite attributes. WebDyne::Session sets its session cookie with only…
- CVE-2026-118599 MEDIUM · 5.5 A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompress_xpi_thread() used libarchive with archive_read_support_format_all() (and filters), so the…
- CVE-2026-120194 HIGH · 7.5 A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a…
- CVE-2026-118598 MEDIUM · 6.5 A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission.…
- CVE-2026-109197 HIGH · 7.5 The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0…
- CVE-2026-109231 MEDIUM · 4.3 The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including,…
- CVE-2026-116964 HIGH · 8.4 A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD)…
- CVE-2026-116086 HIGH · 8.8 A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles…
- CVE-2026-103882 CRITICAL · 9.1 The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to…
- CVE-2026-103915 MEDIUM · 5.3 The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…