Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 40.867 CVE, 0 KEV kaydı · son NVD senkronu 13.11.2026 23:29. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-8793 | PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering acco | 6.9 | 03.08.2026 |
| CVE-2026-8794 | PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a | 6.9 | 03.08.2026 |
| CVE-2026-21553 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-21554 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-21555 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-28147 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Wid | 5.4 | 03.08.2026 |
| CVE-2026-18593 | A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is | 2.9 | 03.08.2026 |
| CVE-2026-21548 | In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed. | 7.5 | 03.08.2026 |
| CVE-2026-21549 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-21550 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-21551 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-21552 | In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed | 7.5 | 03.08.2026 |
| CVE-2026-18590 | A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sys_adm of the file adm.cgi of the component Admin Password Handler. This manipulation causes os command injection. The attack is possible to be carried out remot | 2.1 | 03.08.2026 |
| CVE-2026-18591 | A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the component com.meesho.supply. Such manipulation of the argument user_id/phone number/email address/name lea | 0.9 | 03.08.2026 |
| CVE-2026-12259 | In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response b | 6.5 | 03.08.2026 |
| CVE-2026-9593 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices an | 8.4 | 03.08.2026 |
| CVE-2026-4793 | An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-of-service during installation. | 7.3 | 03.08.2026 |
| CVE-2026-18588 | A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You s | 9.3 | 03.08.2026 |
| CVE-2026-18589 | A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit | 8.9 | 03.08.2026 |
| CVE-2026-18587 | A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. Thi | 6.8 | 03.08.2026 |
| CVE-2026-6694 | A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the fil | 5.5 | 03.08.2026 |
| CVE-2026-6695 | A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format | 5.5 | 03.08.2026 |
| CVE-2026-18583 | A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds r | 5.5 | 03.08.2026 |
| CVE-2026-12852 | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check. | 8.7 | 03.08.2026 |
| CVE-2026-20498 | In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch | 6.0 | 03.08.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.