CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 33
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and…
microsoft / windows_10_1507 · 9 Mar 2016 · EPSS %36.9
Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.
sangoma / freepbx · 21 Kas 2019 · EPSS %36.6
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to…
adobe / acrobat_dc · 9 Tem 2018 · EPSS %36.6
Microsoft Exchange Uzaktan Kod Çalıştırma Zafiyeti
microsoft / exchange_server · 10 Ara 2020 · EPSS %36.5
Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly execute arbitrary code.
amcrest / 1080-lite_8ch_firmware · 8 Nis 2020 · EPSS %36.2
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push.…
haxx / curl · 27 Mar 2024 · EPSS %36.1
SAP NetWeaver (Visual Composer 7.0 RT) sürümleri - 7.30, 7.31, 7.40, 7.50, kısıtlama olmaksızın, yönetici olmayan bir kullanıcı olarak kimlik doğrulaması yapılmış bir saldırgan, ağ üzerinden kötü…
sap / netweaver · 14 Eyl 2021 · EPSS %36.0
Uzaktan kod yürütme zafiyetleri, hem Netwrix Auditor sunucusunu hem de izlenen sistemlere yüklenen ajanları etkileyen Netwrix Auditor Kullanıcı Etkinliği Video Kayıt bileşeninde mevcuttur. Uzaktan…
netwrix / auditor · 8 Kas 2022 · EPSS %36.0
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products,…
hp / icewall_identity_manager · 4 Tem 2016 · EPSS %35.9
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely…
symantec / message_gateway · 11 Ağu 2017 · EPSS %35.9
VMware Workspace ONE Access, Identity Manager ve vRealize Automation, destek betiklerinde uygun olmayan izinler nedeniyle bir ayrıcalık yükseltme zafiyeti içerir. Yerel erişimi olan kötü niyetli bir…
vmware / cloud_foundation · 13 Nis 2022 · EPSS %35.8
GitLab CE/EE'de, 10.5'den başlayarak 14.3.6'ya, 14.4'den başlayarak 14.4.4'e ve 14.5'den başlayarak 14.5.2'ye kadar olan tüm sürümleri etkileyen bir sorun tespit edilmiştir. Yetkisiz dış…
gitlab / gitlab · 13 Ara 2021 · EPSS %35.6
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code…
google / chrome · 11 Ara 2018 · EPSS %35.6
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
apache / http_server · 19 Ara 2000 · EPSS %35.6
Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to…
vercel / next.js · 13 May 2026 · EPSS %35.5
Drupal çekirdeği, yüklenen dosyaların belirli dosya adlarını düzgün şekilde temizlemez, bu da dosyaların yanlış uzantı olarak yorumlanmasına ve yanlış MIME türü olarak sunulmasına veya belirli…
drupal / drupal · 20 Kas 2020 · EPSS %35.4
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
microsoft / office · 10 Haz 2015 · EPSS %35.1
Google Chrome'un 94.0.4606.71 öncesi sürümlerinde V8'de ücretsiz kullanım sonrası bir açık, uzaktan bir saldırganın özel olarak hazırlanmış bir HTML sayfası aracılığıyla yığın bozulmasını potansiyel…
google / chrome · 8 Eki 2021 · EPSS %34.9
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012…
microsoft / windows_7 · 14 Tem 2015 · EPSS %34.9
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to…
google / chrome · 19 Oca 2017 · EPSS %34.8
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
microsoft / windows_2003_server · 28 Kas 2013 · EPSS %34.7
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup…
zyxel / emg2926_firmware · 6 Nis 2017 · EPSS %34.6
Zimbra Collaboration (ZCS) 10.0 ve 10.1'in Webmail Classic UI'sinde, RestFilter servlet'indeki kullanıcı tarafından sağlanan istek parametrelerinin yanlış işlenmesi nedeniyle bir Yerel Dosya İçeri…
synacor / zimbra_collaboration_suite · 22 Ara 2025 · EPSS %34.4
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
libexpat_project / libexpat · 16 Şub 2022 · EPSS %34.2
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2.…
apple / safari · 17 Ara 2025 · EPSS %34.1
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary…
cisco / ios · 18 Eyl 2008 · EPSS %33.9
ASUS RT-AX55 3.0.0.4.386.51598 cihazlarında, kimliği doğrulanmış saldırganlar /start_apply.htm qos_bw_rulelist parametresini kullanarak işletim sistemi komut enjeksiyonu gerçekleştirebilir. Ayrıca,…
asus / rt-ax55_firmware · 11 Eyl 2023 · EPSS %33.9
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The…
ui / airos · 11 Haz 2019 · EPSS %33.8
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
apache / commons_fileupload · 25 Eki 2016 · EPSS %33.7
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."
microsoft / internet_explorer · 11 Şub 2015 · EPSS %33.6