CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 33
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.
8 Eki 2026 · EPSS %0.4
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
microsoft / partner_center · 8 Eki 2026 · EPSS %0.5
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
microsoft / dataverse · 8 Eki 2026 · EPSS %0.8
Azure App Service'de kritik bir fonksiyon için eksik kimlik doğrulaması, yetkisiz bir saldırganın bir ağ üzerinden kod çalıştırmasına olanak tanır.
8 Eki 2026 · EPSS %0.5
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a…
8 Eki 2026 · EPSS %0.2
Azure SRE Aracında eksik yetkilendirme, yetkilendirilmiş bir saldırganın bir ağ üzerinden ayrıcalıklarını yükseltmesine olanak tanır.
microsoft / azure_sre_agent · 8 Eki 2026 · EPSS %0.4
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located…
8 Eki 2026 · EPSS %0.2
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.
ibm / guardium_data_protection · 8 Eki 2026 · EPSS %0.4
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
8 Eki 2026 · EPSS %0.6
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
8 Eki 2026 · EPSS %0.3
fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its…
8 Eki 2026 · EPSS %0.3
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the…
ibm / security_verify_access · 8 Eki 2026 · EPSS %0.6
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the…
ibm / security_verify_access · 8 Eki 2026 · EPSS %0.5
An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
8 Eki 2026 · EPSS %0.3
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication.
ibm / security_verify_access · 8 Eki 2026 · EPSS %0.3
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication.
ibm / security_verify_access · 8 Eki 2026 · EPSS %0.3
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism…
ibm / security_verify_access · 8 Eki 2026 · EPSS %0.4
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format…
8 Eki 2026 · EPSS %2.1
IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can…
ibm / guardium_data_protection · 8 Eki 2026 · EPSS %0.2
IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute…
ibm / guardium_data_protection · 8 Eki 2026 · EPSS %0.4
TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device…
8 Eki 2026 · EPSS %0.4
TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote…
8 Eki 2026 · EPSS %0.6
dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new…
8 Eki 2026 · EPSS %0.5
The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted…
8 Eki 2026 · EPSS %1.7
ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can…
8 Eki 2026 · EPSS %1.5
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.
8 Eki 2026 · EPSS %0.2
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.
8 Eki 2026 · EPSS %0.3
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to…
ibm / datapower_gateway · 8 Eki 2026 · EPSS %0.4
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper…
ibm / datapower_gateway · 8 Eki 2026 · EPSS %0.5
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds…
ibm / datapower_gateway · 8 Eki 2026 · EPSS %0.4