CVE Veritabanı

Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.

NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir

76.363

Takip edilen CVE

7.508

Kritik

1.759

CISA KEV (aktif istismar)

Son 7 gün Aktif istismar (KEV)Kritik En yüksek EPSS Editör incelemeli

1.000+ sonuç · sayfa 13

CVE-2026-39786Yüksek

Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

2 gün önce · EPSS %0.2

7.1

CVE-2026-39739Orta

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-elementor allows Stored…

2 gün önce · EPSS %0.2

6.5

CVE-2026-39738KritikTR

Güvenilmeyen Verilerin Serileştirilmesi zafiyeti Aman FunnelKit Automations wp-marketing-automations'da Nesne Enjeksiyonuna izin verir. Bu sorun FunnelKit Automations'u etkiler: n/a'dan 3.8.6.1'e…

2 gün önce · EPSS %0.4

9.8

CVE-2026-39734Yüksek

Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.

2 gün önce · EPSS %0.5

7.5

CVE-2026-39732KritikTR

Transliterator 2.5.13 ve önceki sürümlerinde Kimlik Doğrulaması Gerekmeden SQL Enjeksiyon zafiyeti mevcuttur.

2 gün önce · EPSS %0.3

9.3

CVE-2026-28160Yüksek

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

2 gün önce · EPSS %0.2

7.1

CVE-2026-27061Orta

Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

2 gün önce · EPSS %0.2

6.5

CVE-2026-120046Orta

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers…

2 gün önce · EPSS %0.3

5.3

CVE-2026-120007Orta

NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can…

2 gün önce · EPSS %0.3

6.5

CVE-2026-119842Orta

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to…

2 gün önce · EPSS %0.3

6.5

CVE-2026-119729Orta

A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media…

2 gün önce · EPSS %0.4

6.5

CVE-2026-119728Orta

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can…

2 gün önce · EPSS %0.2

5.5

CVE-2026-119727Orta

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor…

2 gün önce · EPSS %0.3

6.5

CVE-2026-119526KritikTR

Guvenilmez Veri Seri Halinden Çıkarma zafiyeti, ThemeREX Royal Event'de Nesne Enjeksiyonuna izin veriyor. Bu sorun Royal Event'i etkiliyor: n/a'dan 2.0'a kadar.

2 gün önce · EPSS %0.4

9.8

CVE-2026-119117Orta

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to…

2 gün önce · EPSS %0.2

6.5

CVE-2026-118090Yüksek

Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.

2 gün önce · EPSS %0.4

8.8

CVE-2026-118089Yüksek

Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.

2 gün önce · EPSS %0.4

7.2

CVE-2026-118086Yüksek

Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.