Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

2.687 açık

  1. 8,6Yüksek CVE-2026-61542Yama var Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools drhelius GearboyCWE-3064 sa önce
  2. 7,5Yüksek CVE-2026-118650Yama var Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path labstack echoCWE-1774 sa önce
  3. 8,8Yüksek CVE-2026-78674Yama var Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution WSO2 Business Process ServerWSO2 Enterprise Integrator (BPS profile)CWE-784 sa önce
  4. 7,4Yüksek CVE-2026-6647Yama var Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events WSO2 Identity ServerWSO2 Carbon OAuthCWE-6134 sa önce
  5. 8,3Yüksek CVE-2025-14260Yama var Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources WSO2 Identity ServerWSO2 API ManagerCWE-9184 sa önce
  6. 8,1Yüksek CVE-2026-109411Yama var Samba: access control bypass via vfs_ceph_rgw case-insensitive open Red Hat Enterprise Linux 9Red Hat Enterprise Linux 8CWE-1784 sa önce
  7. 8,2Yüksek CVE-2026-118262 Echo: WebSocket proxy can retain connections and handlers after client disconnect labstack echoCWE-7724 sa önce
  8. 7,9Yüksek CVE-2026-118688Yama var Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename bytecodealliance wasmtimeCWE-614 sa önce
  9. 7,5Yüksek CVE-2026-118686Yama var EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex EspoCRMCWE-13334 sa önce
  10. 8,8Yüksek CVE-2026-118683Yama var MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf Project-MONAI MONAICWE-944 sa önce
  11. 7,5Yüksek CVE-2026-118679Yama var n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger n8n-io n8nCWE-9184 sa önce
  12. 7,1Yüksek CVE-2026-118678Yama var n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction n8n-io n8nCWE-13214 sa önce
  13. 7,1Yüksek CVE-2026-118676Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass n8n-io n8nCWE-8634 sa önce
  14. 7,1Yüksek CVE-2026-118675Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow n8n-io n8nCWE-8634 sa önce
  15. 8,3Yüksek CVE-2026-118649Yama var n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables n8n-io n8nCWE-13214 sa önce
  16. 7,3Yüksek CVE-2026-118648Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy n8n-io n8nCWE-794 sa önce
  17. 8,2Yüksek CVE-2026-118647Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data n8n-io n8nCWE-5324 sa önce
  18. 8,7Yüksek CVE-2026-118645Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter n8n-io n8nCWE-9434 sa önce
  19. 7,7Yüksek CVE-2026-118644Yama var n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance n8n-io n8nCWE-2664 sa önce
  20. 8,2Yüksek CVE-2026-118643Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data n8n-io n8nCWE-2094 sa önce
  21. 7,1Yüksek CVE-2026-118642Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows n8n-io n8nCWE-8634 sa önce
  22. 7,5Yüksek CVE-2026-118641Yama var n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes n8n-io n8nCWE-9434 sa önce
  23. 8,2Yüksek CVE-2026-118261 Echo: Decompress permits unbounded gzip expansion in v4 labstack echoCWE-4004 sa önce
  24. 8,2Yüksek CVE-2026-118260 Echo: BodyDump captures request and response bodies without size limits in v4 labstack echoCWE-4004 sa önce
  25. 8,1Yüksek CVE-2026-118633 A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos U… Sophos SG UTMCWE-355 sa önce