Güvenlik açıkları (CVE)
NVD (National Vulnerability Database) verisiyle CVE kayıtlarını arayın. Aktif olarak istismar edilen açıklar için CISA KEV kataloğunu inceleyin.
Yerel veritabanında 41.242 CVE, 0 KEV kaydı · son NVD senkronu 14.11.2026 11:30. Belirli bir CVE kimliği yerelde yoksa NVD'den anlık getirilir.
| CVE | Açıklama | CVSS | Yayın |
|---|---|---|---|
| CVE-2026-17574 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read. | 5.2 | 27.07.2026 |
| CVE-2026-16812 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability | 10.0 | 27.07.2026 |
| CVE-2026-66476 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. | 4.9 | 27.07.2026 |
| CVE-2026-66477 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. | 5.3 | 27.07.2026 |
| CVE-2026-66434 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. | 6.5 | 27.07.2026 |
| CVE-2026-66437 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. | 4.9 | 27.07.2026 |
| CVE-2026-66438 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | 5.3 | 27.07.2026 |
| CVE-2026-66442 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. | 5.4 | 27.07.2026 |
| CVE-2026-66445 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. | 6.5 | 27.07.2026 |
| CVE-2026-66448 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. | 6.5 | 27.07.2026 |
| CVE-2026-66474 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions. | 4.3 | 27.07.2026 |
| CVE-2026-66475 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions. | 5.9 | 27.07.2026 |
| CVE-2026-65568 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | 5.0 | 27.07.2026 |
| CVE-2026-66050 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences i | 8.7 | 27.07.2026 |
| CVE-2026-66427 | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. | 7.6 | 27.07.2026 |
| CVE-2026-66428 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions. | 4.3 | 27.07.2026 |
| CVE-2026-66433 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. | 6.5 | 27.07.2026 |
| CVE-2026-65562 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. | 6.5 | 27.07.2026 |
| CVE-2026-65563 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. | 5.9 | 27.07.2026 |
| CVE-2026-65564 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. | 5.3 | 27.07.2026 |
| CVE-2026-65567 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. | 5.3 | 27.07.2026 |
| CVE-2026-65433 | Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | 6.5 | 27.07.2026 |
| CVE-2026-65434 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. | 6.5 | 27.07.2026 |
| CVE-2026-65435 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. | 6.5 | 27.07.2026 |
| CVE-2026-59559 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions. | 6.5 | 27.07.2026 |
Kaynak: NIST NVD CVE API 2.0. CVE açıklamaları kaynağındaki İngilizce metinle gösterilir. Bu ürün NVD API'sini kullanır ancak NVD tarafından onaylanmamış veya sertifikalandırılmamıştır.