CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 20
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from…
15 Eki 2026
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
15 Eki 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects…
15 Eki 2026
Yanlış İzin Ataması zafiyeti WP ManageNinja LLC Fluent CRM fluent-crm'de İzin Yükseltmesine olanak tanır. Bu sorun Fluent CRM'nin: n/a'dan 3.2.5'e kadar olan sürümlerini etkiler.
15 Eki 2026
TMS Amelia ameliabooking'de SQL Komutunda Kullanılan Özel Öğelerin Yanlış Şekilde Nötralize Edilmesi ('SQL Injection') güvenlik açığı mevcuttur. Bu sorun, Amelia 2.4.10 sürümüne kadar olan tüm…
15 Eki 2026
The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created…
15 Eki 2026
SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor to itself over a Unix domain…
15 Eki 2026
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the…
15 Eki 2026
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and…
15 Eki 2026
Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link…
14 Eki 2026
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo…
14 Eki 2026
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and…
14 Eki 2026
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through…
14 Eki 2026
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can…
14 Eki 2026
A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument…
14 Eki 2026
e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to unserialize() at file scope and again in the…
14 Eki 2026
e107, bir içerik yönetim sistemidir (CMS). 2.3.7 sürümünden önce, paketlenmiş alt_auth eklentisinin otherdb ve e107db kimlik doğrulama arka uçları, e107_plugins/alt_auth/otherdb_auth.php ve…
14 Eki 2026 · EPSS %0.5
Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in func/main.sh does not escape single quotes when…
14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on…
14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial…
14 Eki 2026
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network…
14 Eki 2026
KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set…
14 Eki 2026
Cisco Secure Email Gateway'in Gelişmiş Kötü Amaçlı Yazılım Koruması (AMP) özelliğinde bir güvenlik açığı, kimlik doğrulaması yapılmamış bir uzaktan saldırgana, altta yatan işletim sistemine任意…
cisco / asyncos · 14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary…
14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and…
14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of…
14 Eki 2026
Lantronix XPress-DR ve XPress-DR-I (CoBos-family) firmware 8.1.0.0 sürümüne kadar, uzaktan saldırganların, 30718 numaralı porttaki kimlik doğrulamayan UDP yapılandırma protokolüne özel olarak…
14 Eki 2026
Juniper Networks Junos OS'un MX Serisi'ndeki kmd bileşeninde bulunan yığın tabanlı tampon taşıma漏洞u, bir kimlik doğrulama ağı saldırganının, belirli IKE sertifika tabanlı paketler aracılığıyla kök…
14 Eki 2026
A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or…
14 Eki 2026
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a…
14 Eki 2026