CVE Veritabanı

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

13 Eki 2026

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

microsoft / windows_10_1607 · 13 Eki 2026 · EPSS %1.1

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

microsoft / windows_10_1607 · 13 Eki 2026 · EPSS %1.1

Microsoft PostScript Yazıcı Sürücüsünde yığın tabanlı tampon taşıma hatası, yetkisiz bir saldırganın ağ üzerinden kod çalıştırmasına olanak tanır.

microsoft / windows_10_1607 · 13 Eki 2026 · EPSS %1.1

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

microsoft / windows_10_1607 · 13 Eki 2026

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

microsoft / windows_10_1607 · 13 Eki 2026

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Windows iSCSI'de yığın tabanlı tampon taşıma aşımı, yetkisiz bir saldırgana ağ üzerinden kod çalıştırma olanağı sağlar.

microsoft / windows_10_1607 · 13 Eki 2026

Windows Libarchive'de yığın tabanlı arabellek taşıma aşırısı, yetkisiz bir saldırgana ağ üzerinden kod çalıştırma imkânı sağlar.

microsoft / windows_10_1809 · 13 Eki 2026

Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and…

13 Eki 2026

Windows Schannel'de bu sorun için bir CWE bulunmuyor ve yetkisiz bir saldırganın bir ağ üzerinden sahtecilik yapmasına olanak tanıyor.

microsoft / windows_10_1607 · 13 Eki 2026 · EPSS %0.7

Microsoft Windows Arama Bileşeni'nde serbest bırakıldıktan sonra kullanım, yetkisiz bir saldırgana ağ üzerinden ayrıcalıkları yükseltme olanağı sağlar.

microsoft / windows_10_1607 · 13 Eki 2026

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user,…

13 Eki 2026

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

13 Eki 2026

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may…

13 Eki 2026 · EPSS %0.9

Potential arbitrary code execution, under specific configurations.

13 Eki 2026

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

13 Eki 2026

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component

13 Eki 2026

Fortinet FortiSIEM 7.5.0'da kısıtlı bir dizine ait bir yol adı için uygun olmayan bir sınırlama ('path traversal') zafiyeti, saldırganın özel olarak hazırlanmış paketler aracılığıyla yetkisiz kod…

13 Eki 2026

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a…

13 Eki 2026

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the…

13 Eki 2026

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build…

13 Eki 2026

A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative…

13 Eki 2026