Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive...
CVE-2026-26307
Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume serve
2026-07-04 归档
今日共收录 996 条安全情报，包含 192 个 CVE，454 篇安全通告，以及 95 篇研究论文。
← 返回归档列表Gitea versions before 1.25.5 mishandle path resolution during template repository generation,...
CVE-2026-25718
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processi
A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the...
CVE-2026-14611
A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the function initProjectMemory of
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.
CVE-2026-20909
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries.
Gitea versions before 1.25.5 lack validation constraints for repository creation fields,...
CVE-2026-22547
Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including length-limited templa
Gitea versions before 1.25.5 allow a user to change another user's primary email address.
CVE-2026-27657
Gitea versions before 1.25.5 allow a user to change another user's primary email address.
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull...
CVE-2026-24690
Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches.
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs...
CVE-2026-25712
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function...
CVE-2026-14610
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::Int
A weakness has been identified in RT-Thread up to 5.0.2. This affects the function...
CVE-2026-14607
A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sys_getaddrinfo of the file component
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive...
CVE-2026-14609
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI...
CVE-2026-14608
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to...
CVE-2026-12481
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deser
A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the...
CVE-2026-14605
A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the l
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the...
CVE-2026-14604
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporte
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow...
CVE-2026-58379
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a rem
A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the...
CVE-2026-14606
A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained...
CVE-2026-14614
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)
A vulnerability was discovered in Keycloak's administrative interface that allows certain...
CVE-2026-14613
A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see informat
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's...
CVE-2026-14615
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative service