CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 21
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in…
3 gün önce · EPSS %0.4
SOCFortress CoPilot, tüm güvenlik operasyonları ihtiyaçlarınız için tek bir pencere sunmaya odaklanır. 0.1.77 sürümünden önce, `POST /api/scoutsuite/generate-gcp-report`…
3 gün önce · EPSS %0.6
ng-antd-admin, Angular ve NestJS yönetim sistemi şablonudur. 22.0 sürümünden önce, önceden tanımlanmış bir `JWT` gizli anahtarı, varsayılan gizli anahtar değiştirilmemiş bir dağıtımda token…
3 gün önce · EPSS %0.5
SOCFortress CoPilot, tüm güvenlik operasyonları ihtiyaçlarınız için tek bir pencere sunmaya odaklanır. Etkilenen dağıtımlarda, `backend/copilot.py` dosyasındaki kimlik doğrulaması yapılmayan…
3 gün önce · EPSS %0.4
SOCFortress CoPilot, tüm güvenlik operasyonları ihtiyaçlarınız için tek bir pencere sunmaya odaklanır. 0.1.76 sürümünden önce, `backend/app/active_response/routes/graylog.py` dosyasındaki…
3 gün önce · EPSS %0.4
SOCFortress CoPilot, güvenlik operasyonları ihtiyaçlarınız için tek bir pencere sunmaya odaklanır. Etkilenen anlık görüntüler, ilgili 0.1.70 ve 0.1.76 sürüm düzeltmelerinden önce, portal…
3 gün önce · EPSS %0.5
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_data_store/upload` in…
3 gün önce · EPSS %0.4
libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in…
3 gün önce · EPSS %0.2
libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska…
3 gün önce · EPSS %0.1
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the `host_session_id` query/form parameter is substituted into the `cool.html`…
3 gün önce · EPSS %0.3
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, several document operations delegated to `LibreOfficeKit` in the per-document…
3 gün önce · EPSS %0.2
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `public/main/inc/lib/career.lib.php` and `public/main/cron/import_csv.php` call PHP's native `unserialize()` on…
3 gün önce · EPSS %0.4
Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, `GET /user/{username}` is anonymously reachable and renders six user-editable profile fields (`firstname`,…
3 gün önce · EPSS %0.2
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebook_from_skill`, `save_profile`, and `delete_profile` actions in…
3 gün önce · EPSS %0.2
Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple `eval()` calls in the vendored PEAR `HTML_QuickForm` libraries can…
3 gün önce · EPSS %0.3
An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass…
3 gün önce · EPSS %0.3
A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can…
3 gün önce · EPSS %0.2
WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks.…
3 gün önce · EPSS %0.4
Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API chatsMessages.update handler, which leaves the client-supplied chatId writable.…
3 gün önce · EPSS %0.3
Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach…
3 gün önce · EPSS %0.3
Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to authenticate as administrator using the fixed admin/admin pair. Attackers on the…
3 gün önce · EPSS %0.4
ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks edit permission only for the first supplied entry id. Authenticated…
3 gün önce · EPSS %0.4
MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key 'muse_bot_session_key'.…
3 gün önce · EPSS %0.5
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService queries filter only on folder id. Attackers…
3 gün önce · EPSS %0.3
PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different…
3 gün önce · EPSS %0.4
FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to manage other libraries' folders because checkuserperm_by_uid only…
3 gün önce · EPSS %0.3
CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPageList endpoint via the order parameter appended to an ORDER BY clause.…
3 gün önce
CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint via the unvalidated order parameter appended to ORDER BY. Attackers can inject…
3 gün önce
DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers,…
3 gün önce · EPSS %0.5
Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host directories by abusing the public-tagged /user/autocomplete_path endpoint.…
3 gün önce · EPSS %0.4