CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 41
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this…
cisco / ios · 17 Tem 2017 · EPSS %21.4
Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
lodash / lodash · 15 Şub 2021 · EPSS %21.3
The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all…
apache / tomcat · 16 May 2018 · EPSS %21.3
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
microsoft / windows_10_1507 · 14 Şub 2023 · EPSS %21.2
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
adobe / flash_player · 24 Eyl 2012 · EPSS %21.2
Sensitive information disclosure in NetScaler Console
citrix / netscaler_console · 10 Tem 2024 · EPSS %21.2
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for…
microsoft / excel_for_mac · 13 Oca 2016 · EPSS %21.1
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data…
apache / tomcat · 16 Şub 2015 · EPSS %21.0
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic…
microsoft / office · 10 Tem 2012 · EPSS %21.0
Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a…
google / chrome · 7 Oca 2026 · EPSS %20.9
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
netapp / cloud_backup · 7 Oca 2021 · EPSS %20.9
Trend Micro Apex One (yerel) yönetim konsolundaki bir güvenlik açığı, önceden kimlik doğrulaması yapılmamış bir uzaktan saldırganın kötü amaçlı kod yüklemesine ve etkilenen kurulumlarda komutları…
trendmicro / apex_one · 5 Ağu 2025 · EPSS %20.8
Roundcube Webmail 1.5.12 ve 1.6.12 öncesi sürümler, bir SVG belgesindeki animate etiketi aracılığıyla Cross-Site-Scripting (XSS) zafiyetiyle etkilenmektedir.
roundcube / webmail · 18 Ara 2025 · EPSS %20.8
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference,…
python / python · 31 Eki 2019 · EPSS %20.7
Microsoft WordPad Bilgi Açıklama Zafiyeti
microsoft / windows_10_1507 · 10 Eki 2023 · EPSS %20.7
Google Chrome'de 128.0.6613.84 sürümünden önceki V8'de tip karışıklığı, uzaktan bir saldırganın özel olarak hazırlanmış bir HTML sayfası aracılığıyla yığın bozulmasını sömürebilmesine olanak tanıdı.…
google / chrome · 21 Ağu 2024 · EPSS %20.7
TP-Link TL-WA855RE V5 20200415-rel37464 cihazlar, aynı ağ上的 yetkisiz bir saldırgana, fabrika ayarlarına sıfırlama ve yeniden başlatma için bir TDDP_RESET POST isteği göndermesine izin verir.…
tp-link / tl-wa855re_firmware · 31 Ağu 2020 · EPSS %20.7
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the…
microsoft / netmeeting · 19 Ara 2000 · EPSS %20.6
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error…
php / php · 19 Ara 2000 · EPSS %20.6
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and…
microsoft / windows_10_1507 · 9 Ağu 2016 · EPSS %20.5
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
python / python · 17 Şub 2023 · EPSS %20.5
Sınır dışı yazma sorunu, geliştirilmiş sınır denetimi ile giderildi. Bu sorun iOS 15.8.5 ve iPadOS 15.8.5, iOS 16.7.12 ve iPadOS 16.7.12, iOS 18.6.2 ve iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia…
apple / ipados · 21 Ağu 2025 · EPSS %20.4
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code…
adobe / flash_player · 10 Ara 2014 · EPSS %20.4
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
ivanti / endpoint_manager_mobile · 14 Eki 2025 · EPSS %20.4
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
adobe / flash_player · 16 Haz 2016 · EPSS %20.2
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which…
apache / tomcat · 7 Haz 2015 · EPSS %20.2
Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file,…
microsoft / office · 15 Ağu 2012 · EPSS %20.1
Joomla için iCagenda uzantısında bulunan bir güvenlik açığı, dosya eki özelliği aracılığıyla keyfi dosyaların yüklenmesine olanak tanır ve sonunda PHP kodu yüklenmesine ve çalıştırılmasına neden olur.
joomlic / icagenda · 20 Haz 2026 · EPSS %20.1
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows…
apache / tomcat · 31 May 2014 · EPSS %20.1
Microsoft Exchange Server Remote Code Execution Vulnerability
microsoft / exchange_server · 3 Mar 2021 · EPSS %20.0