İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2026: sömürülen ve yeni ciddi CVE kayıtları

271 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2025-64155
    52Planlayın

    An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, For

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    fortinet · fortisiem13 Oca 2026

  • CVE-2026-20805
    54Planlayın

    Desktop Window Manager Information Disclosure Vulnerability

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %7

    microsoft · windows 10 160713 Oca 2026

  • CVE-2026-20817
    33İzleyin

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %5

    microsoft · windows 10 21h213 Oca 2026

  • CVE-2026-20820
    32İzleyin

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %2

    microsoft · windows 10 160713 Oca 2026

  • CVE-2026-20833
    22İzleyin

    Windows Kerberos Information Disclosure Vulnerability

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    microsoft · windows server 200813 Oca 2026

  • CVE-2026-20872
    32İzleyin

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %19

    microsoft · windows 10 160713 Oca 2026

  • CVE-2026-20925
    31İzleyin

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %17

    microsoft · windows 10 160713 Oca 2026

  • CVE-2026-20929
    40Planlayın

    Windows HTTP.sys Elevation of Privilege Vulnerability

    YüksekCVSS 7,5SilahlaştırılmışEPSS %2

    microsoft · windows 10 160713 Oca 2026

  • CVE-2026-20947
    41Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · sharepoint server13 Oca 2026

  • CVE-2026-20963
    78Bu hafta

    Microsoft SharePoint Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %29

    microsoft · sharepoint server13 Oca 2026

  • CVE-2026-22862
    28İzleyin

    go-ethereum has a DoS via malicious p2p message

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    ethereum · go ethereum13 Oca 2026

  • CVE-2026-22869
    35İzleyin

    Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow

    YüksekCVSS 8,9Kavram kanıtıEPSS %0

    eigent · eigent13 Oca 2026

  • CVE-2025-25249
    70Bu hafta

    A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %3

    fortinet · fortios13 Oca 2026

  • CVE-2020-36911
    41Planlayın

    Covenant 0.5 - Remote Code Execution (RCE)

    KritikCVSS 9,3İstismar yokEPSS %12

    cobbr · covenant13 Oca 2026

  • CVE-2026-22686
    40Planlayın

    Sandbox Escape via Host Error Prototype Chain in enclave-vm

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    agentfront · enclave13 Oca 2026

  • CVE-2025-14502
    39İzleyin

    News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    vaghasia3 · news and blog designer bundle14 Oca 2026

  • CVE-2026-0594
    24İzleyin

    List Site Contributors <= 1.1.8 - Reflected Cross-Site Scripting via alpha

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    mallsop · list site contributors14 Oca 2026

  • CVE-2026-0717
    21İzleyin

    LottieFiles – Lottie block for Gutenberg <= 3.0.0 - Unauthenticated Sensitive Information Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    lottiefile · lottiefiles14 Oca 2026

  • CVE-2026-23550
    45Planlayın

    WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    modular ds · modular ds14 Oca 2026

  • CVE-2025-67399
    18İzleyin

    An issue in AIRTH SMART HOME AQI MONITOR Bootloader v.1.005 allows a physically proximate attacker to obtain sensitive information via the U

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    airth · smart home aqi monitor bootloader14 Oca 2026

  • CVE-2026-23498
    28İzleyin

    Shopware Improper Control of Generation of Code in Twig rendered views

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    shopware · shopware14 Oca 2026

  • CVE-2026-0897
    28İzleyin

    Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    keras · keras15 Oca 2026

  • CVE-2025-64516
    30İzleyin

    GLPI incorrectly authorizes access to documents

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    glpi-project · glpi15 Oca 2026

  • CVE-2025-67246
    29İzleyin

    A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    ludashi · ludashi driver15 Oca 2026

  • CVE-2025-66417
    39İzleyin

    GLPI has an unauthenticated SQL injection through the inventory endpoint

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    glpi-project · glpi15 Oca 2026

  • CVE-2025-36911
    31İzleyin

    In key-based pairing, there is a possible ID due to a logic error in the code.

    YüksekCVSS 7,1Kavram kanıtıEPSS %8

    google · android15 Oca 2026

  • CVE-2025-67647
    33İzleyin

    SvelteKit Denial of service and possible SSRF when using prerendering

    YüksekCVSS 8,4İstismar yokEPSS %0

    svelte · adapter-node15 Oca 2026

  • CVE-2026-23520
    33İzleyin

    Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE

    YüksekCVSS 8,0Kavram kanıtıEPSS %1

    arcane · arcane15 Oca 2026

  • CVE-2026-0915
    30İzleyin

    getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    gnu · glibc15 Oca 2026

  • CVE-2026-1010
    21İzleyin

    Stored Cross-Site Scripting in Altium Enterprise Server Workflow Engine Allows Privilege Escalation

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    altium · on-prem enterprise server15 Oca 2026

  • CVE-2021-47795
    35İzleyin

    GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    geovision · geovision geowebserver15 Oca 2026

  • CVE-2025-60021
    47Planlayın

    Apache bRPC: Remote command injection vulnerability in heap builtin service

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    apache · brpc16 Oca 2026

  • CVE-2025-68921
    31İzleyin

    SteelSeries Nahimic 3 1.10.7 allows Directory traversal.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    steelseries · nahimic16 Oca 2026

  • CVE-2025-29943
    18İzleyin

    Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    amd · amd epyc™ 9004 series processors16 Oca 2026

  • CVE-2025-69581
    22İzleyin

    An issue was discovered in Chamillo LMS 1.11.2.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    chamilo · chamilo lms16 Oca 2026

  • CVE-2026-23723
    28İzleyin

    WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    wegia · wegia16 Oca 2026

  • CVE-2026-23744
    60Bu hafta

    REC in MCPJam inspector due to HTTP Endpoint exposes

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    mcpjam · inspector16 Oca 2026

  • CVE-2026-23745
    32İzleyin

    node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    isaacs · tar16 Oca 2026

  • CVE-2025-15403
    39İzleyin

    RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    metagauss · registrationmagic – custom registration forms, user registration, payment, and user login16 Oca 2026

  • CVE-2026-1111
    8İzleyin

    Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    publiccms · publiccms18 Oca 2026

  • CVE-2026-1122
    22İzleyin

    Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    yonyou · ksoa18 Oca 2026

  • CVE-2026-1125
    27İzleyin

    D-Link DIR-823X set_wifidog_settings sub_412E7C command injection

    OrtaCVSS 5,5İstismar yokEPSS %15

    dlink · dir-823x firmware18 Oca 2026

  • CVE-2026-23829
    21İzleyin

    Mailpit has SMTP Header Injection via Regex Bypass

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    axllent · mailpit18 Oca 2026

  • CVE-2025-68616
    30İzleyin

    WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    kozea · weasyprint19 Oca 2026

  • CVE-2026-23842
    30İzleyin

    ChatterBot has Denial of Service via Database Connection Pool Exhaustion

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    chatterbot · chatterbot19 Oca 2026

  • CVE-2026-23885
    39İzleyin

    AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    alchemy-cms · alchemy cms19 Oca 2026

  • CVE-2026-23947
    37İzleyin

    Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    orval · orval19 Oca 2026

  • CVE-2026-0905
    39İzleyin

    Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to pote

    KritikCVSS 9,8İstismar yokEPSS %0

    google · chrome20 Oca 2026

  • CVE-2026-22844
    43Planlayın

    Zoom Node Deployments - Command Injection

    KritikCVSS 9,9İstismar yokEPSS %13

    zoom communications inc. · zoom node20 Oca 2026

  • CVE-2025-64087
    39İzleyin

    A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    opensagres · xdocreport20 Oca 2026

  • CVE-2025-65482
    39İzleyin

    An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploadin

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    opensagres · xdocreport20 Oca 2026

  • CVE-2025-55423
    40Planlayın

    A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    iptime · n104s-r1 firmware20 Oca 2026

  • CVE-2025-67261
    26İzleyin

    Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    abacre · retail point of sale20 Oca 2026

  • CVE-2025-67263
    24İzleyin

    Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    abacre · retail point of sale20 Oca 2026

  • CVE-2025-56005
    45Planlayın

    An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` paramet

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    dabeaz · ply20 Oca 2026

  • CVE-2026-0622
    26İzleyin

    Open 5GS WebUI uses a hard-coded JWT signing key

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    open5gs · open5gs20 Oca 2026

  • CVE-2025-55130
    37İzleyin

    A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relativ

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    nodejs · node.js20 Oca 2026

  • CVE-2026-21636
    40Planlayın

    A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enabl

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    nodejs · node.js20 Oca 2026

  • CVE-2026-21955
    32İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    oracle · vm virtualbox20 Oca 2026

  • CVE-2026-21962
    92Hemen

    Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Serve

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %73

    oracle · http server20 Oca 2026

  • CVE-2026-21978
    26İzleyin

    Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing).

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oracle · flexcube universal banking20 Oca 2026

  • CVE-2026-21986
    28İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    oracle · vm virtualbox20 Oca 2026

  • CVE-2025-15521
    39İzleyin

    Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    kodezen · academy lms – wordpress lms plugin for complete elearning solution20 Oca 2026

  • CVE-2026-24061
    99Hemen

    telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    gnu · inetutils21 Oca 2026

  • CVE-2026-22444
    28İzleyin

    Apache Solr: Insufficient file-access checking in standalone core-creation requests

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    apache · solr21 Oca 2026

  • CVE-2026-20045
    70Bu hafta

    Cisco Unified Communications Products Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %4

    cisco · unified communications manager21 Oca 2026

  • CVE-2026-0834
    28İzleyin

    Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    tp-link · archer ax53 firmware21 Oca 2026

  • CVE-2025-68137
    33İzleyin

    EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

    YüksekCVSS 8,3Kavram kanıtıEPSS %1

    linuxfoundation · everest21 Oca 2026

  • CVE-2026-21852
    29İzleyin

    Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation

    OrtaCVSS 5,3Kavram kanıtıEPSS %27

    anthropic · claude code21 Oca 2026

  • CVE-2026-22807
    39İzleyin

    vLLM affected by RCE via auto_map dynamic module loading during model initialization

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    vllm · vllm21 Oca 2026

  • CVE-2026-22849
    28İzleyin

    Saleor lacks proper HTML sanitization in rich text fields

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    saleor · saleor21 Oca 2026

  • CVE-2026-23499
    34İzleyin

    Saleor vulnerable to stored XSS via Unrestricted File Upload

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    saleor · saleor21 Oca 2026

  • CVE-2026-23524
    39İzleyin

    Laravel Redis Horizontal Scaling Insecure Deserialization

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    laravel · reverb21 Oca 2026

  • CVE-2026-24046
    28İzleyin

    Backstage has a Possible Symlink Path Traversal in Scaffolder Actions

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    backstage · backstage21 Oca 2026

  • CVE-2025-13465
    28İzleyin

    Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    lodash · lodash21 Oca 2026

  • CVE-2026-24055
    25İzleyin

    Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    langfuse · langfuse22 Oca 2026

  • CVE-2026-24049
    22İzleyin

    wheel Allows Arbitrary File Permission Modification via Path Traversal

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    wheel project · wheel22 Oca 2026

  • CVE-2026-0920
    39İzleyin

    LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    choijun · la-studio element kit for elementor22 Oca 2026

  • CVE-2026-24332
    17İzleyin

    Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    discord · websocket api service22 Oca 2026

  • CVE-2026-23760
    96Hemen

    SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %96

    smartertools · smartermail22 Oca 2026

  • CVE-2025-69612
    26İzleyin

    A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    tmsglobalsoft · tms management console22 Oca 2026

  • CVE-2025-69821
    29İzleyin

    An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause a denial of service via the BLE connecti

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    beatxp · vega smartwatch firmware22 Oca 2026

  • CVE-2025-69822
    29İzleyin

    An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive information and escalate priv

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    atomberg · erica smart fan firmware22 Oca 2026

  • CVE-2026-24009
    39İzleyin

    Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    docling · docling-core22 Oca 2026

  • CVE-2025-67221
    30İzleyin

    The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    ijl · orjson22 Oca 2026

  • CVE-2025-67923
    28İzleyin

    WordPress JetEngine plugin <= 3.7.7 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    crocoblock · jetengine22 Oca 2026

  • CVE-2025-68001
    40Planlayın

    WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    garidium · g-ffl checkout22 Oca 2026

  • CVE-2025-68999
    34İzleyin

    WordPress Happy Addons for Elementor plugin <= 3.20.4 - SQL Injection vulnerability

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    happymonster · happy addons for elementor22 Oca 2026

  • CVE-2025-70899
    26İzleyin

    PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    phpgurukul · online course registration22 Oca 2026

  • CVE-2026-24306
    39İzleyin

    Azure Front Door Elevation of Privilege Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    microsoft · azure front door22 Oca 2026

  • CVE-2026-0768
    60Bu hafta

    Langflow code Code Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %22

    langflow · langflow23 Oca 2026

  • CVE-2026-0769
    60Bu hafta

    Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %41

    langflow · langflow23 Oca 2026

  • CVE-2026-0770
    88Hemen

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %62

    langflow · langflow23 Oca 2026

  • CVE-2026-0776
    29İzleyin

    Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    discord · client23 Oca 2026

  • CVE-2025-67847
    35İzleyin

    Moodle: moodle: remote code execution via insufficient restore input validation

    YüksekCVSS 8,8İstismar yokEPSS %0

    moodle · moodle23 Oca 2026

  • CVE-2026-0603
    33İzleyin

    Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

    YüksekCVSS 8,3Kavram kanıtıEPSS %1

    red hat · red hat jboss enterprise application platform 7.1 eus for rhel 723 Oca 2026

  • CVE-2026-0994
    32İzleyin

    Denial of Service in Python Protobuf

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    google · protobuf23 Oca 2026

  • CVE-2021-47881
    26İzleyin

    dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    data device corporation · datasims avionics arinc23 Oca 2026

  • CVE-2022-25369
    51Planlayın

    An issue was discovered in Dynamicweb before 9.12.8.

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    23 Oca 2026

  • CVE-2026-24423
    93Hemen

    SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %88

    smartertools · smartermail23 Oca 2026