diptanilsaha
56 kredili kayıt · son 12 ayda 56 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-124316İstismar yok | Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requestsfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,2 | 3 gün önce |
28İzleyin | CVE-2026-124315İstismar yok | Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_itemsfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 3 gün önce |
28İzleyin | CVE-2026-124314İstismar yok | Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activitiesfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 3 gün önce |
21İzleyin | CVE-2026-124313İstismar yok | Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_docfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,2 | 3 gün önce |
37İzleyin | CVE-2026-119145İstismar yok | Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Uploadfrappe · frappe · CWE-22 | Kritik9,4 | — | %0,7 | 29 Eki 2026 |
34İzleyin | CVE-2026-109673İstismar yok | Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Namesfrappe · erpnext · CWE-79 | Yüksek8,5 | — | %0,2 | 12 Eki 2026 |
34İzleyin | CVE-2026-109671İstismar yok | Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pagesfrappe · erpnext · CWE-79 | Yüksek8,5 | — | %0,2 | 12 Eki 2026 |
20İzleyin | CVE-2026-109670İstismar yok | Frappe ERPNext before 15.110.0 Stored XSS via Item Record Namefrappe · erpnext · CWE-79 | Orta5,1 | — | %0,1 | 12 Eki 2026 |
21İzleyin | CVE-2026-109669İstismar yok | Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modificationfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,2 | 12 Eki 2026 |
21İzleyin | CVE-2026-109668İstismar yok | Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpointsfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,1 | 12 Eki 2026 |
28İzleyin | CVE-2026-109666İstismar yok | Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpointsfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
21İzleyin | CVE-2026-109665İstismar yok | Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivationfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,1 | 12 Eki 2026 |
21İzleyin | CVE-2026-109662İstismar yok | Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Formfrappe · erpnext · CWE-79 | Orta5,3 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109661İstismar yok | Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Datafrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109659İstismar yok | Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Datafrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109658İstismar yok | Frappe ERPNext before 15.115.0 Missing Authorization on Endpointsfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109656İstismar yok | Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Accessfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
21İzleyin | CVE-2026-109654İstismar yok | Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpointsfrappe · erpnext · CWE-862 | Orta5,3 | — | %0,1 | 12 Eki 2026 |
34İzleyin | CVE-2026-109653İstismar yok | Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeoverfrappe · erpnext · CWE-79 | Yüksek8,5 | — | %0,2 | 12 Eki 2026 |
34İzleyin | CVE-2026-109652İstismar yok | Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fieldsfrappe · erpnext · CWE-1336 | Yüksek8,7 | — | %0,3 | 12 Eki 2026 |
21İzleyin | CVE-2026-109651İstismar yok | Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Fieldfrappe · erpnext · CWE-918 | Orta5,3 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109649İstismar yok | Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requestsfrappe · erpnext · CWE-89 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109648İstismar yok | Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validationfrappe · erpnext · CWE-89 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109647İstismar yok | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationfrappe · erpnext · CWE-89 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
28İzleyin | CVE-2026-109646İstismar yok | Frappe ERPNext before 15.106.0 SQL Injection via Missing Validationfrappe · erpnext · CWE-89 | Yüksek7,1 | — | %0,2 | 12 Eki 2026 |
- CVE-2026-12431621İzleyin
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext3 gün önce
- CVE-2026-12431528İzleyin
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext3 gün önce
- CVE-2026-12431428İzleyin
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext3 gün önce
- CVE-2026-12431321İzleyin
Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext3 gün önce
- CVE-2026-11914537İzleyin
Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload
KritikCVSS 9,4İstismar yokEPSS %0frappe · frappe29 Eki 2026
- CVE-2026-10967334İzleyin
Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names
YüksekCVSS 8,5İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10967134İzleyin
Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages
YüksekCVSS 8,5İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10967020İzleyin
Frappe ERPNext before 15.110.0 Stored XSS via Item Record Name
OrtaCVSS 5,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966921İzleyin
Frappe ERPNext before 15.110.0 Missing Authorization Allows Unauthorized Status Modification
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966821İzleyin
Frappe ERPNext before 15.110.0 Missing Authorization in Party Record Endpoints
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966628İzleyin
Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966521İzleyin
Frappe ERPNext before 15.108.0 Missing Authorization Allows Master Record Deactivation
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966221İzleyin
Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Form
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10966128İzleyin
Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Data
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965928İzleyin
Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Data
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965828İzleyin
Frappe ERPNext before 15.115.0 Missing Authorization on Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965628İzleyin
Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965421İzleyin
Frappe ERPNext before 15.119.0 Missing Authorization in Transactional Email Endpoints
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965334İzleyin
Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover
YüksekCVSS 8,5İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965234İzleyin
Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields
YüksekCVSS 8,7İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10965121İzleyin
Frappe ERPNext before 15.112.0 Server-Side Request Forgery via Configuration Field
OrtaCVSS 5,3İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10964928İzleyin
Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10964828İzleyin
Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10964728İzleyin
Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026
- CVE-2026-10964628İzleyin
Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext12 Eki 2026