CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 28
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer…
12 Eki 2026 · EPSS %0.6
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP…
12 Eki 2026 · EPSS %0.2
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the…
12 Eki 2026 · EPSS %0.4
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations…
12 Eki 2026 · EPSS %0.3
Progress MarkLogic Server 12.x sürümlerinin 12.1.0'dan önceki sürümleri ve 11.x sürümlerinin 11.3.7'den önceki sürümleri, belirli orman yönetim işlemlerinde yetkilendirme kusuru içerir. Uzak bir…
12 Eki 2026 · EPSS %0.3
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with…
12 Eki 2026 · EPSS %0.3
A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC_addr can lead to os…
12 Eki 2026 · EPSS %2.2
A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len…
12 Eki 2026 · EPSS %2.2
AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim…
12 Eki 2026 · EPSS %1.6
A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation…
12 Eki 2026 · EPSS %0.6
A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based…
12 Eki 2026 · EPSS %0.5
A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a…
12 Eki 2026 · EPSS %2.2
Yetkisiz Erişim zafiyeti Apache SkyWalking BanyanDB'de mevcuttur. Canopy, kavram kanıtı rolü ve izleme-aracısı işlevselliği açısından eksiktir. Varsayılan olmayan bir yapılandırma ile salt-okunur…
12 Eki 2026 · EPSS %0.2
Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain…
12 Eki 2026 · EPSS %0.3
The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and…
12 Eki 2026 · EPSS %0.4
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The…
12 Eki 2026 · EPSS %2.4
Modem OTA yığınında, SIB1 mesajlarındaki zamanlama bilgilerinin uygun şekilde doğrulanmaması nedeniyle yığın tabanlı bir tampon taşıma olasılığı vardır. Bu, ek yürütme ayrıcalıklarına gerek kalmadan…
12 Eki 2026 · EPSS %0.5
BotSharp 5.2.0 sürümüne kadar, WebStarter appsettings.json dosyasındaki sabit Jwt:Key kullanarak taşıyıcı tokenler oluşturmasına olanak tanıyan bir kimlik doğrulama atlatma zafiyeti içerir.…
11 Eki 2026
Agnaistic agnai 1.0.555 sürümüne kadar, self-host.docker-compose.yml dosyasında sabit bir yönetici parolası ve halka açık JWT gizli anahtarı ayarlayan bir硬 kodlu kimlik bilgileri zafiyeti içerir.…
11 Eki 2026 · EPSS %0.3
TOZED X300 sürüm 6.01.3'e kadar bir zafiyet bulundu. Bu zafiyet, IPPingDiagnostics Handler bileşeninin process_ping işlevini etkiler. Host argümanının manipülasyonu işletim sistemi komut…
11 Eki 2026 · EPSS %2.5
The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options…
11 Eki 2026 · EPSS %0.3
Quick quotes WordPress eklentisi 1.0.0 sürümüne kadar, AJAX eylemlerinden birinin capability veya nonce kontrolü yapmaz ve çağırana hangi seçeneğin yazıldığını seçme izni verir, böylece kimlik…
11 Eki 2026 · EPSS %0.3
The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can…
11 Eki 2026 · EPSS %0.3
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be…
11 Eki 2026 · EPSS %0.2
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be…
11 Eki 2026 · EPSS %0.2
The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing…
11 Eki 2026 · EPSS %0.3
Freeton WP WordPress eklentisi 1.0.0 sürümüne kadar, bir kullanıcıyı kimlik doğrularken etkinleştirme kodunu doğru şekilde doğrulamadığından, saldırganlar kimliklerini bildikleri herhangi bir…
11 Eki 2026 · EPSS %0.3
The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete…
11 Eki 2026 · EPSS %0.3
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every…
11 Eki 2026 · EPSS %0.3
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be…
11 Eki 2026 · EPSS %0.2