CVE Veritabanı
Teknik veriler otomatik gelir, önemli açıklıklar Türkçeye çevrilir. Editörlerimizin incelediği kayıtlar İncelendi etiketiyle işaretlenir.
NVD, CISA KEV ve EPSS kaynaklarından otomatik senkronize edilir
1.000+ sonuç · sayfa 48
Windows Mark of the Web Güvenlik Özellik Atlatma Zafiyeti
microsoft / windows_10_1507 · 13 Ağu 2024 · EPSS %13.6
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
oracle / jdk · 22 Eki 2015 · EPSS %13.6
Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption…
microsoft / office · 15 Ağu 2015 · EPSS %13.6
Arm Mali GPU çekirdek sürücüsü, GPU bellek işlemlerinin yanlış yönetilmesi nedeniyle ayrıcalıklı olmayan kullanıcıların serbest bırakılmış belleğe erişimine izin verir. Bu, Bifrost r0p0'dan r38p1'e…
arm / bifrost_gpu_kernel_driver · 25 Eki 2022 · EPSS %13.6
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
6 Ağu 2026 · EPSS %13.5
Tamamen tehlikeye açık bir ESXi ana bilgisayar, VMware Tools'un konaktan misafire işlemlerde kimlik doğrulamayı yapmasını engelleyebilir, bu da misafir sanal makinenin gizliliği ve bütünlüğünü…
vmware / tools · 13 Haz 2023 · EPSS %13.5
Veritas Backup Exec 21.2'den önceki sürümlerinde bir sorun bulundu. Bir istemci ve bir Aracının iletişimi başarılı bir kimlik doğrulaması gerektirir, bu genellikle güvenli bir TLS iletişimi üzerinden…
veritas / backup_exec · 1 Mar 2021 · EPSS %13.5
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is…
ivanti / endpoint_manager · 9 Eyl 2025 · EPSS %13.5
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
microsoft / office · 13 May 2015 · EPSS %13.5
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
netty / netty · 29 Oca 2020 · EPSS %13.5
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
kootenay_web_inc / kootenay_web_inc_whois · 19 Ara 2000 · EPSS %13.5
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged…
linux / linux_kernel · 8 May 2023 · EPSS %13.4
Oracle Sistemler'in Oracle Solaris ürününde (bileşen: XScreenSaver) güvenlik açığı bulundu. Etkilenen desteklenen sürüm 11'dir. Kolayca yararlanılabilen bu güvenlik açığı, altyapıda Oracle Solaris…
oracle / solaris · 16 Eki 2019 · EPSS %13.4
Serbest bırakıldıktan sonra kullanım sorunu, geliştirilmiş bellek yönetimi ile giderildi. Bu sorun iOS 14.8 ve iPadOS 14.8, macOS Big Sur 11.6'da çözüldü. Kötü amaçlı oluşturulmuş web içeriğinin…
apple / ipados · 24 Ağu 2021 · EPSS %13.4
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection.…
17 Nis 2026 · EPSS %13.4
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command…
trendnet / tew-822dre_firmware · 28 Ara 2025 · EPSS %13.3
Oracle E-Business Suite'in Oracle Payments ürününde (bileşen: Dosya İletimi) bir güvenlik açığı bulundu. Etkilenen desteklenen sürümler 12.2.3-12.2.15 arasındadır. Kolayca yararlanılabilen bu…
oracle / e-business_suite · 28 May 2026 · EPSS %13.3
vCenter Server, dosya izinlerinin uygun olmaması nedeniyle bir bilgi sızıntısı zafiyeti içermektedir. vCenter Server'a idari olmayan erişim hakkı bulunan kötü niyetli bir kişi, bu sorunu敏itive…
vmware / cloud_foundation · 29 Mar 2022 · EPSS %13.3
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this…
apache / batik · 24 Şub 2021 · EPSS %13.3
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the…
microsoft / windows_95 · 19 Ara 2000 · EPSS %13.2
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use…
apache / tomcat · 17 Nis 2017 · EPSS %13.2
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an…
python / python · 4 Mar 2022 · EPSS %13.2
Dell RecoverPoint for Virtual Machines, 6.0.3.1 HF1 sürümünden önceki sürümler, önceden belirlenmiş bir kimlik bilgileri zafiyeti içerir. Bu, önceden belirlenmiş kimlik bilgilerinden haberdar olan…
dell / recoverpoint_for_virtual_machines · 17 Şub 2026 · EPSS %13.1
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of…
oracle / banking_platform · 4 Tem 2016 · EPSS %13.1
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote…
apache / tomcat · 25 Şub 2016 · EPSS %13.1
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption…
mozilla / firefox · 7 Oca 2025 · EPSS %13.1
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is…
microsoft / windows_2000 · 31 Ara 2000 · EPSS %13.0
systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows…
systeminformation / systeminformation · 16 Ara 2025 · EPSS %13.0
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.
typsoft / typsoft · 11 Ara 2000 · EPSS %13.0
Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access,…
flowiseai / flowise · 8 Eki 2025 · EPSS %13.0