Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

2.687 açık

  1. 7,2Yüksek CVE-2026-118257 Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages intlify vue-i18nCWE-795 sa önce
  2. 8,4Yüksek CVE-2026-118255Yama var Highcharts Grid: javascript: URL in credits.href runs script on click highcharts@highcharts dashboardsCWE-795 sa önce
  3. 8,6Yüksek CVE-2026-118254Yama var Highcharts Grid: pagination language options are parsed as HTML highcharts@highcharts grid-proCWE-795 sa önce
  4. 8,4Yüksek CVE-2026-118253Yama var Highcharts Dashboards: fullscreen labels are parsed as HTML highcharts@highcharts dashboardsCWE-795 sa önce
  5. 8,4Yüksek CVE-2026-118252Yama var Highcharts Dashboards: sidebar component labels are parsed as HTML highcharts@highcharts dashboardsCWE-796 sa önce
  6. 8,4Yüksek CVE-2026-118251Yama var Highcharts: javascript: URL in credits.href runs script on click highchartsCWE-796 sa önce
  7. 7,2Yüksek CVE-2026-118250 Highcharts: dotted series.keys paths write to Object.prototype highchartsCWE-13216 sa önce
  8. 7,2Yüksek CVE-2026-118249 Highcharts: series column construction writes to Object.prototype highchartsCWE-13216 sa önce
  9. 8,4Yüksek CVE-2026-118246 Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes highchartsCWE-796 sa önce
  10. 8,6Yüksek CVE-2026-118245Yama var Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace highcharts@highcharts dashboardsCWE-796 sa önce
  11. 7,2Yüksek CVE-2026-118244 Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print highchartsCWE-796 sa önce
  12. 8,5Yüksek CVE-2026-118242Yama var Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>` highcharts@highcharts grid-proCWE-796 sa önce
  13. 8,1Yüksek CVE-2026-84725 Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap Red Hat JBoss Enterprise Application Platform 8Red Hat JBoss Enterprise Application Platform 7CWE-8296 sa önce
  14. 8,5Yüksek CVE-2026-116797 Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` highcharts@highcharts dashboardsCWE-796 sa önce
  15. 7,2Yüksek CVE-2026-116796 Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts highchartsCWE-796 sa önce
  16. 7,5Yüksek CVE-2026-116795 RE2JS: Quadratic-time denial of service in re2js lookbehind matching le0pard re2jsCWE-4076 sa önce
  17. 8,3Yüksek CVE-2026-116794Yama var russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation Eugeny russhCWE-8627 sa önce
  18. 7,8Yüksek CVE-2026-82961 Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode zephyrproject zephyrCWE-7877 sa önce
  19. 8,8Yüksek CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability UltralyticsCWE-227 sa önce
  20. 7,8Yüksek CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability UltralyticsCWE-947 sa önce
  21. 7,8Yüksek CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability UltralyticsCWE-5027 sa önce
  22. 7,8Yüksek CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability UltralyticsCWE-947 sa önce
  23. 7,8Yüksek CVE-2026-118615 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability UltralyticsCWE-787 sa önce
  24. 7,8Yüksek CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability UltralyticsCWE-947 sa önce
  25. 7,8Yüksek CVE-2026-118613 Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability UltralyticsCWE-5027 sa önce