opensec-intelligence
47 kredili kayıt · son 12 ayda 47 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
8İzleyin | CVE-2026-115366İstismar yok | OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIsopenbao · openbao · CWE-863 | Düşük2,0 | — | — | 1 gün önce |
8İzleyin | CVE-2026-115363İstismar yok | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configurationopenbao · openbao · CWE-212 | Düşük2,1 | — | — | 1 gün önce |
8İzleyin | CVE-2026-115358İstismar yok | OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parametersopenbao · openbao · CWE-532 | Düşük2,0 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114640İstismar yok | Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Routertraefik · traefik · CWE-290 | Yüksek7,0 | — | %0,2 | 1 gün önce |
30İzleyin | CVE-2026-114047İstismar yok | FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validationfreerdp · freerdp · CWE-295 | Yüksek7,6 | — | %0,1 | 3 gün önce |
28İzleyin | CVE-2026-111881İstismar yok | FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboardfreerdp · freerdp · CWE-191 | Yüksek7,2 | — | %0,2 | 6 gün önce |
33İzleyin | CVE-2026-111880İstismar yok | FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offsetfreerdp · freerdp · CWE-787 | Yüksek8,3 | — | %0,3 | 6 gün önce |
34İzleyin | CVE-2026-111378İstismar yok | FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parserfreerdp · freerdp · CWE-400 | Yüksek8,7 | — | %0,3 | 16 Eki 2026 |
28İzleyin | CVE-2026-111377İstismar yok | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassemblyfreerdp · freerdp · CWE-400 | Yüksek7,1 | — | %0,2 | 16 Eki 2026 |
9İzleyin | CVE-2026-111376İstismar yok | FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEfreerdp · freerdp · CWE-125 | Düşük2,3 | — | %0,1 | 16 Eki 2026 |
25İzleyin | CVE-2026-111375İstismar yok | FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Titlefreerdp · freerdp · CWE-125 | Orta6,3 | — | %0,2 | 16 Eki 2026 |
24İzleyin | CVE-2026-111374İstismar yok | FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestfreerdp · freerdp · CWE-20 | Orta6,0 | — | %0,2 | 16 Eki 2026 |
26İzleyin | CVE-2026-92228İstismar yok | Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log readapache software foundation · apache airflow keycloak provider · CWE-732 | Orta6,5 | — | %0,2 | 15 Eki 2026 |
30İzleyin | CVE-2026-109841İstismar yok | undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokensnodejs · undici · CWE-178 | Yüksek7,5 | — | %0,2 | 15 Eki 2026 |
36İzleyin | CVE-2026-109829İstismar yok | undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsnodejs · undici · CWE-346 | Kritik9,1 | — | %0,1 | 15 Eki 2026 |
28İzleyin | CVE-2026-110839İstismar yok | FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Datafreerdp · freerdp · CWE-787 | Yüksek7,1 | — | %0,2 | 14 Eki 2026 |
34İzleyin | CVE-2026-110838İstismar yok | FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypassfreerdp · freerdp · CWE-306 | Yüksek8,7 | — | %0,2 | 14 Eki 2026 |
24İzleyin | CVE-2026-110837İstismar yok | FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decodingfreerdp · freerdp · CWE-122 | Orta6,1 | — | %0,2 | 14 Eki 2026 |
28İzleyin | CVE-2026-110836İstismar yok | FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Typefreerdp · freerdp · CWE-835 | Yüksek7,1 | — | %0,2 | 14 Eki 2026 |
25İzleyin | CVE-2026-110835İstismar yok | FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Tokenfreerdp · freerdp · CWE-93 | Orta6,3 | — | %0,2 | 14 Eki 2026 |
28İzleyin | CVE-2026-110834İstismar yok | FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handlefreerdp · freerdp · CWE-476 | Yüksek7,1 | — | %0,2 | 14 Eki 2026 |
32İzleyin | CVE-2026-110833İstismar yok | FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxyfreerdp · freerdp · CWE-400 | Yüksek8,2 | — | %0,2 | 14 Eki 2026 |
28İzleyin | CVE-2026-110832İstismar yok | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRSTfreerdp · freerdp · CWE-400 | Yüksek7,1 | — | %0,3 | 14 Eki 2026 |
21İzleyin | CVE-2026-110831İstismar yok | FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATEfreerdp · freerdp · CWE-775 | Orta5,3 | — | %0,2 | 14 Eki 2026 |
32İzleyin | CVE-2026-110830İstismar yok | FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATEfreerdp · freerdp · CWE-400 | Yüksek8,2 | — | %0,2 | 14 Eki 2026 |
- CVE-2026-1153668İzleyin
OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
DüşükCVSS 2,0İstismar yokopenbao · openbao1 gün önce
- CVE-2026-1153638İzleyin
OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration
DüşükCVSS 2,1İstismar yokopenbao · openbao1 gün önce
- CVE-2026-1153588İzleyin
OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Malformed Parameters
DüşükCVSS 2,0İstismar yokopenbao · openbao1 gün önce
- CVE-2026-11464028İzleyin
Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router
YüksekCVSS 7,0İstismar yokEPSS %0traefik · traefik1 gün önce
- CVE-2026-11404730İzleyin
FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation
YüksekCVSS 7,6İstismar yokEPSS %0freerdp · freerdp3 gün önce
- CVE-2026-11188128İzleyin
FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer via Clipboard
YüksekCVSS 7,2İstismar yokEPSS %0freerdp · freerdp6 gün önce
- CVE-2026-11188033İzleyin
FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset
YüksekCVSS 8,3İstismar yokEPSS %0freerdp · freerdp6 gün önce
- CVE-2026-11137834İzleyin
FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame Parser
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp16 Eki 2026
- CVE-2026-11137728İzleyin
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp16 Eki 2026
- CVE-2026-1113769İzleyin
FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE
DüşükCVSS 2,3İstismar yokEPSS %0freerdp · freerdp16 Eki 2026
- CVE-2026-11137525İzleyin
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title
OrtaCVSS 6,3İstismar yokEPSS %0freerdp · freerdp16 Eki 2026
- CVE-2026-11137424İzleyin
FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequest
OrtaCVSS 6,0İstismar yokEPSS %0freerdp · freerdp16 Eki 2026
- CVE-2026-9222826İzleyin
Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read
OrtaCVSS 6,5İstismar yokEPSS %0apache software foundation · apache airflow keycloak provider15 Eki 2026
- CVE-2026-10984130İzleyin
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
YüksekCVSS 7,5İstismar yokEPSS %0nodejs · undici15 Eki 2026
- CVE-2026-10982936İzleyin
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
KritikCVSS 9,1İstismar yokEPSS %0nodejs · undici15 Eki 2026
- CVE-2026-11083928İzleyin
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083834İzleyin
FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083724İzleyin
FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding
OrtaCVSS 6,1İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083628İzleyin
FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083525İzleyin
FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token
OrtaCVSS 6,3İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083428İzleyin
FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083332İzleyin
FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy
YüksekCVSS 8,2İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083228İzleyin
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083121İzleyin
FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE
OrtaCVSS 5,3İstismar yokEPSS %0freerdp · freerdp14 Eki 2026
- CVE-2026-11083032İzleyin
FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
YüksekCVSS 8,2İstismar yokEPSS %0freerdp · freerdp14 Eki 2026