Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.312 CVE, 0 KEV kaydı · son NVD senkronu 15.11.2026 11:31. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-14625 | A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shell.exec of the file tui_gateway/server.py. The manipulation results in protection mechanism failure. It is possible to launch the attack remo | 2.1 | 04.07.2026 |
| CVE-2026-14626 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgent.run_conversation of the file run_agent.py of the component HTTP API. This manipulation of the argument todos causes denial of service. The | 2.1 | 04.07.2026 |
| CVE-2026-14624 | A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handler. The manipulation leads to denial of service. It is possible to initiate the a | 2.1 | 04.07.2026 |
| CVE-2026-14623 | A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to denial of service. The attack may be performed from remote. | 2.1 | 04.07.2026 |
| CVE-2026-14621 | A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker | 1.3 | 04.07.2026 |
| CVE-2026-14622 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajax_files of the component AJAX Endpoint. Performing a manipulation results in mis | 5.5 | 04.07.2026 |
| CVE-2026-14619 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argument editid causes sql injection. Remote exploitation of the attack is possible. | 2.1 | 04.07.2026 |
| CVE-2026-12252 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution. These classes accept u | 7.8 | 04.07.2026 |
| CVE-2026-54424 | An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The patched version is Parsec for Windows version 150-104a. A user can generate a s | 8.4 | 04.07.2026 |
| CVE-2026-58523 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. | 6.5 | 04.07.2026 |
| CVE-2026-14617 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer._filter_and_accumulate of the file gateway/stream_consumer.py of the component Streaming Reasoning Tag Filter. The manipulat | 1.3 | 04.07.2026 |
| CVE-2026-58524 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 6.1 | 04.07.2026 |
| CVE-2026-58597 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 4.3 | 04.07.2026 |
| CVE-2026-58300 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | 5.5 | 04.07.2026 |
| CVE-2026-58418 | SSRF via HTTP Redirect in Repository Migration | 6.5 | 04.07.2026 |
| CVE-2026-58419 | Notification API leaks private issue metadata after access revocation | 7.5 | 04.07.2026 |
| CVE-2026-58421 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service | 7.5 | 04.07.2026 |
| CVE-2026-58422 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts | 9.8 | 04.07.2026 |
| CVE-2026-58423 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories | 7.7 | 04.07.2026 |
| CVE-2026-58424 | Permanent Fork PR Workflow Approval Gate Bypass | 8.9 | 04.07.2026 |
| CVE-2026-58426 | Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write | 9.6 | 04.07.2026 |
| CVE-2026-58522 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | 5.5 | 04.07.2026 |
| CVE-2026-58292 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 7.5 | 04.07.2026 |
| CVE-2026-58293 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 7.5 | 04.07.2026 |
| CVE-2026-58294 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 7.5 | 04.07.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.