Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 33.618 CVE, 0 KEV kaydı · son NVD senkronu 08.11.2026 05:25. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-54183 | Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holdin | 4.3 | 12.08.2026 |
| CVE-2026-19548 | Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_d | 5.5 | 12.08.2026 |
| CVE-2026-15803 | In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This | 8.7 | 12.08.2026 |
| CVE-2026-73291 | Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthen | 7.1 | 12.08.2026 |
| CVE-2026-73264 | Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighth | 7.6 | 12.08.2026 |
| CVE-2026-73262 | Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.py inserted finding.resource_tags, assembled by unroll_dict and parse_html_string, into generated reports without HTML escaping, allowing a | 5.4 | 12.08.2026 |
| CVE-2026-73263 | Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth in api/src/backend/a | 9.9 | 12.08.2026 |
| CVE-2026-68754 | A repository publisher without delete permission may modify protected package content under specific conditions. | 6.5 | 12.08.2026 |
| CVE-2026-68755 | A bundle writer may create misleading release promotion information under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-68756 | A party with write access to stored session data may affect JFrog Artifactory under specific conditions. | 6.6 | 12.08.2026 |
| CVE-2026-68757 | A user with access to a valid SAML response may impersonate another user under specific conditions. | 7.5 | 12.08.2026 |
| CVE-2026-68760 | An unauthenticated user may bypass authentication under specific cache conditions. | 5.3 | 12.08.2026 |
| CVE-2026-67286 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name. | 6.3 | 12.08.2026 |
| CVE-2026-67287 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input. | 6.3 | 12.08.2026 |
| CVE-2026-68752 | A Project Resource Manager may gain broader administrative privileges under specific conditions. | 7.2 | 12.08.2026 |
| CVE-2026-68753 | An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way. | 5.3 | 12.08.2026 |
| CVE-2026-66381 | A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66382 | An authenticated user may write files outside the intended Artifactory work directory under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66375 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions. | 8.1 | 12.08.2026 |
| CVE-2026-66376 | Credentials for a deleted user may remain valid for a short period under specific conditions. | 5.4 | 12.08.2026 |
| CVE-2026-66377 | An unauthenticated user may access restricted repository information under specific conditions. | 5.3 | 12.08.2026 |
| CVE-2026-66378 | An authenticated user without repository read permission may access private NuGet metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-66379 | An authenticated user may view private Puppet module metadata without repository read access. | 4.3 | 12.08.2026 |
| CVE-2026-66380 | An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions. | 4.3 | 12.08.2026 |
| CVE-2026-50561 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity | 9.4 | 12.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.