Peter Ullrich

209 kredili kayıt · son 12 ayda 209 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
8İzleyin	CVE-2026-66295İstismar yok	Processing instruction target and content emitted unescaped in Saxy encoder allows XML injectionqcam · saxy · CWE-91	Düşük2,1	—	%0,1	6 Kas 2026
8İzleyin	CVE-2026-66294İstismar yok	XML injection in Saxy via unescaped CDATA section terminatorqcam · saxy · CWE-91	Düşük2,1	—	%0,1	6 Kas 2026
8İzleyin	CVE-2026-66293İstismar yok	XML comment injection in Saxy encoder via unescaped double hyphenqcam · saxy · CWE-91	Düşük2,1	—	%0,1	6 Kas 2026
27İzleyin	CVE-2026-115274İstismar yok	Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixirelixir-lang · elixir · CWE-1284 Kimlik doğrulamasız	Orta6,9	—	%0,4	30 Eki 2026
34İzleyin	CVE-2026-116078İstismar yok	HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,4	28 Eki 2026
20İzleyin	CVE-2026-65632İstismar yok	ECDSA signature length is not validated in jose, allowing signature malleabilitypotatosalad · jose · CWE-347 Zayıf kripto	Orta5,1	—	%0,0	26 Eki 2026
27İzleyin	CVE-2026-65631İstismar yok	erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of servicepotatosalad · jose · CWE-407	Orta6,9	—	%0,2	26 Eki 2026
23İzleyin	CVE-2026-65630İstismar yok	Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in josepotatosalad · jose · CWE-208	Orta5,9	—	%0,1	26 Eki 2026
29İzleyin	CVE-2026-65629İstismar yok	Weak PBKDF2 parameters for password-encrypted private-key export in josepotatosalad · jose · CWE-916 Gömülü kimlik bilgisi	Yüksek7,4	—	%0,0	26 Eki 2026
23İzleyin	CVE-2026-65628İstismar yok	Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key typespotatosalad · jose · CWE-674 Hizmet dışı bırakma	Orta5,9	—	%0,1	26 Eki 2026
27İzleyin	CVE-2026-65627İstismar yok	Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2potatosalad · jose · CWE-409	Orta6,9	—	%0,2	26 Eki 2026
23İzleyin	CVE-2026-65626İstismar yok	Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in josepotatosalad · jose · CWE-203	Orta5,9	—	%0,0	26 Eki 2026
23İzleyin	CVE-2026-65625İstismar yok	Attacker-controlled AES-GCM authentication tag length allows tag forgery in josepotatosalad · jose · CWE-354	Orta5,9	—	%0,1	26 Eki 2026
34İzleyin	CVE-2026-115269İstismar yok	HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	26 Eki 2026
25İzleyin	CVE-2026-114216İstismar yok	Chunk extensions accept bare LF and CR, enabling request smuggling in Banditmtrudel · bandit · CWE-444 Kimlik doğrulamasız	Orta6,3	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-114213İstismar yok	WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-113436İstismar yok	Quadratic bignum parsing of Content-Length and Host port values in Banditmtrudel · bandit · CWE-407 Kimlik doğrulamasız	Yüksek8,7	—	%0,6	26 Eki 2026
32İzleyin	CVE-2026-111103İstismar yok	HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Banditmtrudel · bandit · CWE-460 Kimlik doğrulamasız	Yüksek8,2	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-111101İstismar yok	HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-110499İstismar yok	Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	26 Eki 2026
25İzleyin	CVE-2026-110314İstismar yok	WebSocket frames keep reaching the WebSock after a server-initiated close in Banditmtrudel · bandit · CWE-602 Kimlik doğrulamasız	Orta6,3	—	%0,3	26 Eki 2026
34İzleyin	CVE-2026-109584İstismar yok	HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Banditmtrudel · bandit · CWE-409 Kimlik doğrulamasız	Yüksek8,7	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-108529İstismar yok	SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Banditmtrudel · bandit · CWE-407 Kimlik doğrulamasız	Yüksek8,7	—	%0,6	26 Eki 2026
34İzleyin	CVE-2026-108525İstismar yok	HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Banditmtrudel · bandit · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	26 Eki 2026
23İzleyin	CVE-2026-103061İstismar yok	Path traversal in Gleam via unvalidated package application namesgleam · gleam · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,9	—	%0,3	12 Eki 2026

CVE-2026-66295
8İzleyin
Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection
DüşükCVSS 2,1İstismar yokEPSS %0
qcam · saxy6 Kas 2026
CVE-2026-66294
8İzleyin
XML injection in Saxy via unescaped CDATA section terminator
DüşükCVSS 2,1İstismar yokEPSS %0
qcam · saxy6 Kas 2026
CVE-2026-66293
8İzleyin
XML comment injection in Saxy encoder via unescaped double hyphen
DüşükCVSS 2,1İstismar yokEPSS %0
qcam · saxy6 Kas 2026
CVE-2026-115274
27İzleyin
Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
elixir-lang · elixir30 Eki 2026
CVE-2026-116078
34İzleyin
HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit28 Eki 2026
CVE-2026-65632
20İzleyin
ECDSA signature length is not validated in jose, allowing signature malleability
OrtaCVSS 5,1İstismar yokEPSS %0
- Zayıf kripto
potatosalad · jose26 Eki 2026
CVE-2026-65631
27İzleyin
erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service
OrtaCVSS 6,9İstismar yokEPSS %0
potatosalad · jose26 Eki 2026
CVE-2026-65630
23İzleyin
Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose
OrtaCVSS 5,9İstismar yokEPSS %0
potatosalad · jose26 Eki 2026
CVE-2026-65629
29İzleyin
Weak PBKDF2 parameters for password-encrypted private-key export in jose
YüksekCVSS 7,4İstismar yokEPSS %0
- Gömülü kimlik bilgisi
potatosalad · jose26 Eki 2026
CVE-2026-65628
23İzleyin
Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types
OrtaCVSS 5,9İstismar yokEPSS %0
- Hizmet dışı bırakma
potatosalad · jose26 Eki 2026
CVE-2026-65627
27İzleyin
Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2
OrtaCVSS 6,9İstismar yokEPSS %0
potatosalad · jose26 Eki 2026
CVE-2026-65626
23İzleyin
Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose
OrtaCVSS 5,9İstismar yokEPSS %0
potatosalad · jose26 Eki 2026
CVE-2026-65625
23İzleyin
Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
OrtaCVSS 5,9İstismar yokEPSS %0
potatosalad · jose26 Eki 2026
CVE-2026-115269
34İzleyin
HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit26 Eki 2026
CVE-2026-114216
25İzleyin
Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-114213
34İzleyin
WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit26 Eki 2026
CVE-2026-113436
34İzleyin
Quadratic bignum parsing of Content-Length and Host port values in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-111103
32İzleyin
HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-111101
34İzleyin
HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit26 Eki 2026
CVE-2026-110499
34İzleyin
Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit26 Eki 2026
CVE-2026-110314
25İzleyin
WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-109584
34İzleyin
HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-108529
34İzleyin
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
mtrudel · bandit26 Eki 2026
CVE-2026-108525
34İzleyin
HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mtrudel · bandit26 Eki 2026
CVE-2026-103061
23İzleyin
Path traversal in Gleam via unvalidated package application names
OrtaCVSS 5,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
gleam · gleam12 Eki 2026