Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

8.114 açık

  1. 7,0Yüksek CVE-2026-78118Yama var Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP zephyrproject zephyrCWE-36221 Eki 2026
  2. 4,2Orta CVE-2026-78117 Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air zephyrproject zephyrCWE-36221 Eki 2026
  3. 3,5Düşük CVE-2026-18748 Zephyr Bluetooth Classic A2DP codec IE işlemede sınır dışı bellek okuma açığı zephyrproject zephyrCWE-12521 Eki 2026
  4. 5,2Orta CVE-2026-78116Yama var Double free of an RTIO submission in the Broadcom AFBR-S50 sensor driver data-evaluation error path zephyrproject zephyrCWE-41521 Eki 2026
  5. 7,8Yüksek CVE-2026-19676 Zephyr PECI transfer sistem çağrısında doğrulanmayan kullanıcı tamponu işaretçileri çekirdek belleğine erişime izin veriyor zephyrproject zephyrCWE-82221 Eki 2026
  6. 7,7Yüksek CVE-2026-105945Yama var Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage Apache Software Foundation Apache PulsarCWE-2221 Eki 2026
  7. 10,0Kritik CVE-2026-105944 Apache Pulsar Manager: Kimlik doğrulama eksikliği ve yönetici kimlik bilgisinin ifşası (destek sonlandırılmış) Apache Software Foundation Apache Pulsar ManagerCWE-30621 Eki 2026
  8. 6,3Orta CVE-2026-114266 ProjectWorlds Advanced Library Management System profile.php dosyasında SQL enjeksiyonu açığı projectworlds Advanced Library Management SystemCWE-7421 Eki 2026
  9. 7,7Yüksek CVE-2026-105942Yama var Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation Apache Software Foundation Apache PulsarCWE-86321 Eki 2026
  10. 2,3Düşük CVE-2026-105938Yama var Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all Apache Software Foundation Apache PulsarCWE-86321 Eki 2026
  11. 8,7Yüksek CVE-2026-105937Yama var Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  12. 5,2Orta CVE-2026-113461 Checkmk mk-oracle eklentisinde güvensiz Oracle Home kütüphane yüklemesi nedeniyle yerel yetki yükseltme Checkmk GmbH CheckmkCWE-42621 Eki 2026
  13. 5,3Orta CVE-2026-105936Yama var Apache Pulsar Functions connector listesi uç noktasında yetki denetimi eksikliği Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  14. 4,9Orta CVE-2026-105935Yama var Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  15. 7,2Yüksek CVE-2026-105934Yama var Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  16. 2,3Düşük CVE-2026-105933Yama var Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization Apache Software Foundation Apache PulsarCWE-63621 Eki 2026
  17. 2,3Düşük CVE-2026-105932Yama var Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  18. 8,8Yüksek CVE-2026-113870Yama var MongoDB Compass'ta BSON ayrıştırmada sunucu kaynaklı JavaScript değerlerinin hatalı kodlanması MongoDB CompassCWE-11621 Eki 2026
  19. 6,5Orta CVE-2026-111401Yama var Tailored Tools WordPress eklentisinde CSRF (siteler arası istek sahteciliği) açıklığı Tailored Media Tailored ToolsCWE-35221 Eki 2026
  20. 2,3Düşük CVE-2026-105931Yama var Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants Apache Software Foundation Apache PulsarCWE-86221 Eki 2026
  21. 6,0Orta CVE-2026-105930Yama var Apache Pulsar'da paket URL'lerinde yetkilendirme eksikliği, kiracılar arası paket indirmeye izin veriyor Apache Software Foundation Apache PulsarCWE-86321 Eki 2026
  22. 4,3Orta CVE-2026-112868Yama var WordPress H5P eklentisinde yetkisiz nesne erişimi (IDOR) zafiyeti H5PCWE-63921 Eki 2026
  23. 2,3Düşük CVE-2026-105927Yama var Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission Apache Software Foundation Apache PulsarCWE-86321 Eki 2026
  24. 6,3Orta CVE-2026-114265 ProjectWorlds Advanced Library Management System returned_book_search.php dosyasında SQL enjeksiyonu açığı projectworlds Advanced Library Management SystemCWE-7421 Eki 2026
  25. 4,3Orta CVE-2026-114176Yama var WordPress eRoom eklentisinde yetkilendirme eksikliğinden kaynaklanan erişim kontrolü zafiyeti DigitalME eRoomCWE-86221 Eki 2026