nu11secur1ty
14 kredili kayıt · son 12 ayda 14 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-54333İstismar yok | Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameterwordpress · social-share-buttons · CWE-89 | Yüksek8,8 | — | %0,2 | 13 Oca 2026 |
20İzleyin | CVE-2023-54328İstismar yok | AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Formaimonesoft · aimone video converter · CWE-120 | Orta5,1 | — | %0,4 | 13 Oca 2026 |
20İzleyin | CVE-2023-53985İstismar yok | Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)zippy · zstore · CWE-79 | Orta5,1 | — | %0,2 | 13 Oca 2026 |
35İzleyin | CVE-2022-50895İstismar yok | Aero CMS 0.0.1 - SQL Injectionaerocms project · aerocms · CWE-89 | Yüksek8,8 | — | %0,6 | 13 Oca 2026 |
35İzleyin | CVE-2022-50805İstismar yok | Senayan Library Management System 9.0.0 - SQL Injectionslims · senayan library management system · CWE-89 | Yüksek8,8 | — | %0,3 | 13 Oca 2026 |
34İzleyin | CVE-2023-53957İstismar yok | Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijackingkimai · kimai · CWE-1275 | Yüksek8,5 | — | %0,5 | 19 Ara 2025 |
37İzleyin | CVE-2023-53951İstismar yok | Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secretgauzy · ever gauzy · CWE-347 | Kritik9,3 | — | %0,3 | 19 Ara 2025 |
19İzleyin | CVE-2023-53900İstismar yok | Spip 4.1.10 Admin Account Spoofing via Malicious SVG Uploadspip · spip · CWE-79 | Orta4,8 | — | %0,3 | 16 Ara 2025 |
27İzleyin | CVE-2023-53878İstismar yok | Member Login Script 3.3 Client-Side Request Desynchronization Vulnerabilityphpjabbers · member login script · CWE-444 | Orta6,9 | — | %0,3 | 15 Ara 2025 |
37İzleyin | CVE-2023-53877İstismar yok | Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameterphpjabbers · bus reservation system · CWE-89 | Kritik9,3 | — | %0,4 | 15 Ara 2025 |
27İzleyin | CVE-2023-53871İstismar yok | Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logicsoosyze · soosyze · CWE-434 | Orta6,9 | — | %0,6 | 15 Ara 2025 |
20İzleyin | CVE-2023-53870İstismar yok | Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameterjorani · jorani · CWE-79 | Orta5,1 | — | %0,3 | 15 Ara 2025 |
34İzleyin | CVE-2023-53869İstismar yok | WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Executionwebigniter · webigniter · CWE-434 | Yüksek8,7 | — | %0,5 | 15 Ara 2025 |
34İzleyin | CVE-2023-53734İstismar yok | dawa-pharma-1.0 - SQL Injection via Email Parametermayurik · dawa-pharma · CWE-89 | Yüksek8,7 | — | %0,5 | 4 Ara 2025 |
- CVE-2023-5433335İzleyin
Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter
YüksekCVSS 8,8İstismar yokEPSS %0wordpress · social-share-buttons13 Oca 2026
- CVE-2023-5432820İzleyin
AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration Form
OrtaCVSS 5,1İstismar yokEPSS %0aimonesoft · aimone video converter13 Oca 2026
- CVE-2023-5398520İzleyin
Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)
OrtaCVSS 5,1İstismar yokEPSS %0zippy · zstore13 Oca 2026
- CVE-2022-5089535İzleyin
Aero CMS 0.0.1 - SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0aerocms project · aerocms13 Oca 2026
- CVE-2022-5080535İzleyin
Senayan Library Management System 9.0.0 - SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0slims · senayan library management system13 Oca 2026
- CVE-2023-5395734İzleyin
Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking
YüksekCVSS 8,5İstismar yokEPSS %0kimai · kimai19 Ara 2025
- CVE-2023-5395137İzleyin
Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret
KritikCVSS 9,3İstismar yokEPSS %0gauzy · ever gauzy19 Ara 2025
- CVE-2023-5390019İzleyin
Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload
OrtaCVSS 4,8İstismar yokEPSS %0spip · spip16 Ara 2025
- CVE-2023-5387827İzleyin
Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability
OrtaCVSS 6,9İstismar yokEPSS %0phpjabbers · member login script15 Ara 2025
- CVE-2023-5387737İzleyin
Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter
KritikCVSS 9,3İstismar yokEPSS %0phpjabbers · bus reservation system15 Ara 2025
- CVE-2023-5387127İzleyin
Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic
OrtaCVSS 6,9İstismar yokEPSS %0soosyze · soosyze15 Ara 2025
- CVE-2023-5387020İzleyin
Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter
OrtaCVSS 5,1İstismar yokEPSS %0jorani · jorani15 Ara 2025
- CVE-2023-5386934İzleyin
WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution
YüksekCVSS 8,7İstismar yokEPSS %0webigniter · webigniter15 Ara 2025
- CVE-2023-5373434İzleyin
dawa-pharma-1.0 - SQL Injection via Email Parameter
YüksekCVSS 8,7İstismar yokEPSS %0mayurik · dawa-pharma4 Ara 2025