Browse All CVEs
34,099 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46468 |
medium | 4.4 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46730 |
medium | 4.2 | 0.0017 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-54483 |
medium | 6.7 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1 | |
CVE-2026-56015 |
critical | 9.1 | 0.0065 | 2026-10-29 | Net::IP::LPM versions before 1.11 for Perl allow a heap out-of-bounds read via an unbounde | |
CVE-2026-56085 |
low | 3.3 | 0.0014 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-59234 |
medium | 6.9 | 0.0064 | 2026-10-29 | Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventControlle | |
CVE-2026-46463 |
medium | 6.5 | 0.0033 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46464 |
medium | 4.9 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46465 |
medium | 5.5 | 0.0041 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-46466 |
low | 2.7 | 0.0015 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-14459 |
high | 8.8 | 0.0021 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') vulnera | |
CVE-2026-14460 |
high | 8.8 | 0.0016 | 2026-10-29 | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Insti | |
CVE-2026-49813 |
medium | 6.7 | 0.0062 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-49814 |
high | 7.2 | 0.0200 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-49815 |
high | 7.2 | 0.0171 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-53478 |
high | 7.2 | 0.0200 | 2026-10-29 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-14615 |
low | 2.7 | 0.0038 | 2026-10-29 | A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Key | |
CVE-2026-14604 |
low | 2.1 | 0.0023 | 2026-10-29 | A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected i | |
CVE-2026-14608 |
low | 2.1 | 0.0037 | 2026-10-29 | A security vulnerability has been detected in SourceCodester CET Automated Grading System | |
CVE-2026-12481 |
critical | 9.8 | 0.0072 | 2026-10-29 | A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due | |
CVE-2026-14609 |
low | 2.9 | 0.0040 | 2026-10-29 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predic | |
CVE-2026-14610 |
low | 1.9 | 0.0013 | 2026-10-29 | A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the fun | |
CVE-2026-14611 |
medium | 5.3 | 0.0043 | 2026-10-29 | A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the | |
CVE-2026-20706 |
critical | 9.1 | 0.0059 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass tok | |
CVE-2026-20779 |
high | 7.1 | 0.0049 | 2026-10-29 | Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that all | |
CVE-2026-20896 |
critical | 9.8 | 0.0276 | 2026-10-29 | Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* | |
CVE-2026-20909 |
medium | 5.3 | 0.0039 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time | |
CVE-2026-22547 |
critical | 9.1 | 0.0052 | 2026-10-29 | Gitea versions before 1.25.5 lack validation constraints for repository creation fields, i | |
CVE-2026-22555 |
high | 8.1 | 0.0039 | 2026-10-29 | Gitea versions before 1.26.0 allow API users to fork a repository into an organization wit | |
CVE-2026-22874 |
critical | 9.6 | 0.0046 | 2026-10-29 | Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and m | |
CVE-2026-24451 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes fro | |
CVE-2026-24690 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing | |
CVE-2026-25038 |
high | 7.5 | 0.0062 | 2026-10-29 | Gitea 1.26.2 allows unauthorized users to access labels of private organizations. | |
CVE-2026-25712 |
high | 7.5 | 0.0048 | 2026-10-29 | Gitea versions before 1.25.5 have insufficient visibility checks in organization permissio | |
CVE-2026-25714 |
medium | 4.3 | 0.0039 | 2026-10-29 | Gitea versions up to and including 1.26.1 do not apply public-only token filtering consist | |
CVE-2026-25718 |
critical | 9.1 | 0.0056 | 2026-10-29 | Gitea versions before 1.25.5 mishandle path resolution during template repository generati | |
CVE-2026-25779 |
medium | 6.1 | 0.0030 | 2026-10-29 | Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-e | |
CVE-2026-25782 |
medium | 5.3 | 0.0039 | 2026-10-29 | Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the l | |
CVE-2026-26231 |
high | 8.5 | 0.0036 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permissio | |
CVE-2026-26232 |
critical | 9.1 | 0.0050 | 2026-10-29 | Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry | |
CVE-2026-26247 |
critical | 9.1 | 0.0050 | 2026-10-29 | Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctl | |
CVE-2026-26292 |
critical | 9.8 | 0.0065 | 2026-10-29 | Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync | |
CVE-2026-26307 |
high | 7.5 | 0.0063 | 2026-10-29 | Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expen | |
CVE-2026-27657 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 allow a user to change another user's primary email address. | |
CVE-2026-27660 |
high | 7.5 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 allow draft release data or attachments to be accessed withou | |
CVE-2026-27761 |
medium | 4.3 | 0.0045 | 2026-10-29 | Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to | |
CVE-2026-27771 |
high | 8.2 | 0.0139 | 2026-10-29 | Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer | |
CVE-2026-27775 |
high | 8.8 | 0.0091 | 2026-10-29 | Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one | |
CVE-2026-27779 |
high | 7.5 | 0.0058 | 2026-10-29 | Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when dete | |
CVE-2026-27780 |
critical | 9.8 | 0.0064 | 2026-10-29 | Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing p |