Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.312 CVE, 0 KEV kaydı · son NVD senkronu 15.11.2026 17:31. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-13746 | Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted values to vulnerable Cortex SQL or object listing command paths, causing Snowflake CL | 5.4 | 29.06.2026 |
| CVE-2026-13748 | Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An attacker could exploit this by supplying crafted repository or project content that r | 6.3 | 29.06.2026 |
| CVE-2026-13749 | Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project conte | 8.8 | 29.06.2026 |
| CVE-2026-13750 | Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent local debug logs. An attacker could exploit this by obtaining read access to the affected user's local log files | 5.5 | 29.06.2026 |
| CVE-2026-41052 | Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10. | 9.4 | 29.06.2026 |
| CVE-2026-13580 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID leads to buffer overflow. Remote exploitation of | 7.4 | 29.06.2026 |
| CVE-2026-13581 | A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. The manipulation of the argument rootAPmac results in os command injectio | 2.1 | 29.06.2026 |
| CVE-2026-13582 | A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is | 7.4 | 29.06.2026 |
| CVE-2026-13583 | A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. Such manipulation of the argument ShareName/SelectName leads to buffer overflow. The attac | 7.4 | 29.06.2026 |
| CVE-2026-13587 | A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-ba | 2.9 | 29.06.2026 |
| CVE-2026-13437 | Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens | 6.5 | 29.06.2026 |
| CVE-2026-57336 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. | 7.1 | 29.06.2026 |
| CVE-2026-57337 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. | 7.1 | 29.06.2026 |
| CVE-2026-57338 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | 7.1 | 29.06.2026 |
| CVE-2026-57339 | Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57340 | Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57341 | Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57328 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57330 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57331 | Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions. | 9.9 | 29.06.2026 |
| CVE-2026-57332 | Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions. | 7.1 | 29.06.2026 |
| CVE-2026-57333 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. | 7.1 | 29.06.2026 |
| CVE-2026-57334 | Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions. | 6.5 | 29.06.2026 |
| CVE-2026-57335 | Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions. | 6.5 | 29.06.2026 |
| CVE-2026-56124 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any page of the application. The index model executes an unbound | 8.7 | 29.06.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.