59496 matches found
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-56657
Gitea SSH Key Parser Denial of Service...
CVE-2026-58435
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58435 Gitea LFS Deploy-Key Privilege Escalation
Gitea LFS Deploy-Key Privilege Escalation...
EUVD-2026-58162
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58435
Gitea's LFS server is vulnerable to a privilege escalation flaw due to a trust-boundary confusion in how it handles deploy keys . The system incorrectly sets the UserID in LFS JWT tokens to the repository owner's ID rather than the specific deploy key's identity. Consequently, an attacker possess...
CVE-2026-58435 Gitea LFS Deploy-Key Privilege Escalation
Gitea LFS Deploy-Key Privilege Escalation...
CVE-2026-58432
The Gitea application (code.gitea.io/gitea) is vulnerable to Missing Authorization and Authorization Bypass issues. These flaws can be triggered through a user-controlled key or incorrect permission assignments for critical resources, potentially leading to the exposure of sensitive information t...
CVE-2026-68451
A flaw was found in the Linux kernel's s390 zcrypt module. The ccaecc2protkey function, responsible for handling Common Cryptographic Architecture CCA Elliptic Curve Cryptography ECC private key requests, does not properly validate the length of the key token. This allows a local attacker to...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
EUVD-2026-58144
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657
The Git repository management system Gitea contains a vulnerability in the parseKeyString() function within the models/asymkey/ssh_key_parse.go file. Due to access control deficiencies, a remote attacker could submit a specially crafted SSH key to trigger a denial of service , potentially leading...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
CVE-2026-73576
In Zimbra Collaboration ZCS before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An attacker who obtains a JWT signed with...
CVE-2026-73576
CVE-2026-73576 affects Zimbra Collaboration (ZCS) before 10.1.17 via the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated with an insecure RNG, yielding insufficient entropy. This may allow offline brute-forcing to recover the JWT signing secret, enabling JWT forgery and po...
EUVD-2026-58075
In Zimbra Collaboration ZCS before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An attacker who obtains a JWT signed with...
CVE-2026-68452
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length...
CVE-2026-68451
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...