CyberSectr

CVE Veritabanı

Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.

NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir

76.495

Takip edilen CVE

7.520

Kritik

1.759

CISA KEV (aktif istismar)

Son 7 günAktif istismar (KEV)KritikEn yüksek EPSSEditör incelemeli
Filtreleri temizle

1.000+ sonuç · sayfa 30

CVE-2026-62053Kritik

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-62054KritikTR

Yat Kiralama 2.6 ve önceki sürümlerinde Kimlik Doğrulaması Gerekmeden PHP Nesne Enjeksiyonu.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-62031Kritik

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

10 Eki 2026 · EPSS %0.3

9.3
CVE-2026-62032Kritik

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-62022Kritik

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-62024KritikTR

CodeBard Help Desk'in 1.1.2 ve önceki sürümlerinde Abonelere Bağlı Herhangi Bir Dosya Yükleme Zafiyeti.

10 Eki 2026 · EPSS %0.4

9.9
CVE-2026-62025Kritik

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.

10 Eki 2026 · EPSS %0.3

9
CVE-2026-42719Kritik

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

10 Eki 2026 · EPSS %0.5

9.8
CVE-2026-42723Kritik

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-42716Kritik

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-42718Kritik

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-42696Kritik

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration &amp; Cloning sitevault-backup-restore-migration allows Remote Code…

10 Eki 2026 · EPSS %0.4

10
CVE-2026-39801Kritik

Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-40800Kritik

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.

10 Eki 2026 · EPSS %0.4

9.3
CVE-2026-108598Kritik

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers…

10 Eki 2026 · EPSS %0.7

9.8
CVE-2026-106610Kritik

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a…

10 Eki 2026 · EPSS %0.5

9.8
CVE-2026-105892Kritik

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This…

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-105889Kritik

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects…

10 Eki 2026 · EPSS %0.3

9.3
CVE-2026-104398Kritik

Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate…

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-108551Kritik

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated…

10 Eki 2026 · EPSS %0.4

9.8
CVE-2026-107373Kritik

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string(…

10 Eki 2026

9.1
CVE-2026-103513Kritik

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deserialize(), from either a…

10 Eki 2026 · EPSS %0.2

9.8
CVE-2026-103635Kritik

Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read…

10 Eki 2026 · EPSS %0.2

9.1
CVE-2026-103501Kritik

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the…

10 Eki 2026 · EPSS %0.2

9.8
CVE-2026-93945Kritik

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-93936Kritik

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-93937Kritik

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-93938Kritik

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-93940Kritik

Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.

10 Eki 2026 · EPSS %0.3

9.8
CVE-2026-93941Kritik

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.

10 Eki 2026 · EPSS %0.3

9.8