Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

2.206 açık

  1. 6,8Orta CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability Alpine iLX-F511CWE-1219 sa önce
  2. 6,3Orta CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability Alpine iLX-F511CWE-7989 sa önce
  3. 5,8Orta CVE-2026-103405Yama var Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting Juniper Networks Session Smart RouterJuniper Networks Session Smart ConductorCWE-7410 sa önce
  4. 6,8Orta CVE-2026-103404Yama var Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials Juniper Networks Session Smart ConductorCWE-73210 sa önce
  5. 5,5Orta CVE-2026-103400Yama var Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup Juniper Networks Session Smart RouterJuniper Networks Session Smart ConductorCWE-7410 sa önce
  6. 4,3Orta CVE-2026-103393Yama var Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing Juniper Networks Session Smart RouterCWE-12510 sa önce
  7. 4,8Orta CVE-2026-103392Yama var Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled Juniper Networks Session Smart RouterCWE-78710 sa önce
  8. 5,3Orta CVE-2026-93536Yama var X.Org Server GestureBuildSprite Use-After-Free x.org xwaylandX.org xorg-x11-serverCWE-12210 sa önce
  9. 5,3Orta CVE-2026-103391Yama var Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature Juniper Networks Session Smart RouterCWE-78710 sa önce
  10. 5,3Orta CVE-2026-103390Yama var Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification Juniper Networks Session Smart RouterJuniper Networks Session Smart ConductorCWE-12510 sa önce
  11. 6,9Orta CVE-2026-93524Yama var X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read x.org xwaylandX.org xorg-x11-serverCWE-12610 sa önce
  12. 5,4Orta CVE-2026-50542Yama var Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure xibosignage xibo-cmsCWE-86211 sa önce
  13. 5,9Orta CVE-2026-118029Yama var Unverified ownership of the default Athena query result location in AWS SDK for pandas aws-sdk-pandasCWE-28311 sa önce
  14. 4,3Orta CVE-2026-50543Yama var Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices xibosignage xibo-cmsCWE-86211 sa önce
  15. 6,5Orta CVE-2026-50539Yama var Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments xibosignage xibo-cmsCWE-86211 sa önce
  16. 6,1Orta CVE-2026-112356Yama var GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter GFI USA, LLC GFI KerioConnectCWE-7911 sa önce
  17. 5,7Orta CVE-2026-115402 OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash)… OpenVPN ovpn-dco-winCWE-36211 sa önce
  18. 6,5Orta CVE-2026-50541Yama var Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export xibosignage xibo-cmsCWE-86213 sa önce
  19. 4,8Orta CVE-2026-59959Yama var SAIL: WebP decoder division by zero through malformed animated canvas metadata HappySeaFox sailCWE-36913 sa önce
  20. 5,5Orta CVE-2026-93516Yama var .Org Server XInput Passive Grab Use-After-Free x.org xwaylandX.org xorg-x11-serverCWE-41613 sa önce
  21. 6,5Orta CVE-2026-116404 WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability David Anderson Redux FrameworkCWE-86213 sa önce
  22. 6,5Orta CVE-2026-115957Yama var WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability WP Discussion BoardCWE-7913 sa önce
  23. 6,5Orta CVE-2026-55369 Waline login accepts a non-string email as a match-all MongoDB query walinejs walineCWE-28713 sa önce
  24. 6,8Orta CVE-2026-93515Yama var .Org Server Present Extension Use-After-Free x.org xwaylandX.org xorg-x11-serverCWE-41613 sa önce
  25. 4,2Orta CVE-2026-67077 HCL BigFix AEX is affected by multiple security vulnerabilities. HCL Software BigFix AEXCWE-44114 sa önce