Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 67 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-81680İstismar yok | openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removaljahlives · openssl encrypt · CWE-347 | Kritik9,3 | — | %0,2 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81681İstismar yok | openssl_encrypt before 1.4.9 False Encryption via Cleartext Storagejahlives · openssl encrypt · CWE-311 | Kritik9,3 | — | %0,1 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81682İstismar yok | openssl_encrypt before 1.4.9 Insecure File Permissionsjahlives · openssl_encrypt · CWE-276 | Yüksek8,6 | — | %0,1 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81683İstismar yok | openssl_encrypt before 1.4.9 Plaintext Private Key Storagejahlives · openssl encrypt · CWE-312 | Yüksek8,6 | — | %0,0 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81685İstismar yok | openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadatajahlives · openssl encrypt · CWE-116 | Kritik9,3 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81687İstismar yok | openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives · openssl_encrypt · CWE-400 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81688İstismar yok | openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256jahlives · openssl encrypt · CWE-311 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81689İstismar yok | openssl_encrypt before 1.4.9 Weak Pepper Key Derivationjahlives · openssl encrypt · CWE-916 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81690İstismar yok | verify-usb before 1.4.9 Symlink Directory Traversal Code Executionjahlives · openssl encrypt · CWE-59 | Yüksek8,7 | — | %0,7 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81691İstismar yok | openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLsjahlives · openssl encrypt · CWE-319 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81692İstismar yok | openssl_encrypt before 1.4.9 Denial of Service via STREAMINFOjahlives · openssl_encrypt · CWE-789 | Yüksek8,7 | — | %0,4 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81693İstismar yok | openssl_encrypt before 1.4.9 Denial of Service via QR total fieldjahlives · openssl encrypt · CWE-789 | Yüksek8,7 | — | %0,4 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81694İstismar yok | verify-usb before 1.4.9 Output Injection via Unsanitized Filenamesjahlives · openssl encrypt · CWE-117 | Kritik9,3 | — | %0,2 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81695İstismar yok | openssl_encrypt before 1.4.9 Terminal Injection via key_idjahlives · openssl encrypt · CWE-117 | Kritik9,3 | — | %0,2 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81696İstismar yok | openssl_encrypt before 1.4.9 Terminal Injection via info Commandjahlives · openssl encrypt · CWE-117 | Kritik9,3 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81697İstismar yok | openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configurationjahlives · openssl_encrypt · CWE-426 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81698İstismar yok | openssl_encrypt before 1.4.9 Shell Injection via info commandjahlives · openssl encrypt · CWE-78 | Kritik9,3 | — | %0,4 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81699İstismar yok | openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costjahlives · openssl encrypt · CWE-770 | Yüksek8,7 | — | %0,5 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81700İstismar yok | openssl_encrypt before 1.4.9 GPG Signature Verification Bypassjahlives · openssl encrypt · CWE-347 | Kritik9,3 | — | %0,3 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81701İstismar yok | openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned pluginjahlives · openssl encrypt · CWE-347 | Kritik9,3 | — | %0,4 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81702İstismar yok | openssl_encrypt before 1.4.9 Key Substitution via Identity Loadjahlives · openssl encrypt · CWE-345 | Kritik9,3 | — | %0,1 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81703İstismar yok | openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Keyjahlives · openssl encrypt · CWE-287 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81704İstismar yok | openssl_encrypt before 1.4.9 Weak Key Derivation via D-Busjahlives · openssl encrypt · CWE-916 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81705İstismar yok | openssl-encrypt before 1.4.9 Password Cleartext Leak via Debugjahlives · openssl encrypt · CWE-532 | Yüksek8,7 | — | %0,4 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81706İstismar yok | openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowingjahlives · openssl encrypt · CWE-345 | Kritik9,3 | — | %0,1 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81707İstismar yok | openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Emailjahlives · openssl_encrypt · CWE-20 | Kritik9,3 | — | %0,5 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81714İstismar yok | openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypassjahlives · openssl encrypt · CWE-347 | Kritik9,3 | — | %0,1 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81715İstismar yok | openssl_encrypt before 1.4.9 Credential Exposure via Debug Outputjahlives · openssl encrypt · CWE-532 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81716İstismar yok | openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversaljahlives · openssl encrypt · CWE-22 | Yüksek8,7 | — | %0,2 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81717İstismar yok | openssl_encrypt before 1.4.9 Integrity Bypass via Added Filesjahlives · openssl encrypt · CWE-347 | Kritik9,3 | — | %0,1 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81718İstismar yok | openssl_encrypt before 1.4.9 Weak Cryptographic Parametersjahlives · openssl_encrypt · CWE-326 | Yüksek8,7 | — | %0,1 | 27 Ağu 2026 |
37İzleyin | CVE-2026-81719İstismar yok | openssl_encrypt before 1.4.9 Remote Code Execution via Pluginjahlives · openssl encrypt · CWE-94 | Kritik9,3 | — | %0,4 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81721İstismar yok | openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives · openssl encrypt · CWE-400 | Yüksek8,7 | — | %0,5 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81722İstismar yok | nltk PorterStemmer before 3.10.3 Quadratic-time DoSnltk · nltk · CWE-407 | Yüksek8,7 | — | %0,5 | 27 Ağu 2026 |
33İzleyin | CVE-2026-81726İstismar yok | NLTK through 3.10.3 Path Traversal via Model-Artifact APIsnltk · nltk · CWE-73 | Yüksek8,3 | — | %0,3 | 27 Ağu 2026 |
40Planlayın | CVE-2026-81735İstismar yok | UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Executionbytedance · ui-tars-desktop · CWE-306 | Kritik10,0 | — | %0,7 | 27 Ağu 2026 |
28İzleyin | CVE-2026-81817İstismar yok | Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modificationflowintel · flowintel · CWE-639 | Yüksek7,2 | — | %0,3 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81818İstismar yok | Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privilegesflowintel · flowintel · CWE-269 | Yüksek8,6 | — | %0,3 | 27 Ağu 2026 |
36İzleyin | CVE-2026-81826İstismar yok | Flowintel Fails to Invalidate Active Sessions After Password Changeflowintel · flowintel · CWE-384 | Kritik9,1 | — | %0,4 | 27 Ağu 2026 |
34İzleyin | CVE-2026-10036Kavram kanıtı | SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsingspeechbrain · speechbrain · CWE-502 | Yüksek8,7 | — | %0,4 | 27 Ağu 2026 |
42Planlayın | CVE-2026-18885İstismar yok | Unauthenticated Remote Code Execution in GraphQL Composite Data APIservicenow · servicenow ai platform · CWE-94 | Kritik10,0 | — | %7,2 | 27 Ağu 2026 |
42Planlayın | CVE-2026-18886İstismar yok | Unauthenticated Privilege Escalation via System Configuration Image Upload Processorservicenow · servicenow ai platform · CWE-284 | Kritik10,0 | — | %5,0 | 27 Ağu 2026 |
40Planlayın | CVE-2026-19092Kavram kanıtı | Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowingunknown · tutor lms · CWE-74 | Kritik9,8 | — | %2,0 | 27 Ağu 2026 |
24İzleyin | CVE-2026-25250Kavram kanıtı | EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."eazsolution · eazyfix · CWE-325 | Orta6,0 | — | %0,1 | 27 Ağu 2026 |
39İzleyin | CVE-2026-30612İstismar yok | An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a CWE-494 | Kritik9,8 | — | %0,4 | 27 Ağu 2026 |
40Planlayın | CVE-2026-35868İstismar yok | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.CWE-20 | Kritik9,8 | — | %2,3 | 27 Ağu 2026 |
40Planlayın | CVE-2026-35869İstismar yok | A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.CWE-20 | Kritik9,8 | — | %2,3 | 27 Ağu 2026 |
28İzleyin | CVE-2026-36102İstismar yok | An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privCWE-269 | Yüksek7,2 | — | %0,5 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37003İstismar yok | Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.CWE-94 | Kritik9,8 | — | %1,3 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37004İstismar yok | BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arCWE-1336 | Kritik9,8 | — | %0,7 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37006İstismar yok | A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code exeCWE-287 | Kritik9,8 | — | %0,8 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37007İstismar yok | A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversCWE-22 | Kritik9,8 | — | %0,9 | 27 Ağu 2026 |
30İzleyin | CVE-2026-37012İstismar yok | A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via harCWE-798 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
21İzleyin | CVE-2026-37064Kavram kanıtı | User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the appCWE-203 | Orta5,3 | — | %0,3 | 27 Ağu 2026 |
36İzleyin | CVE-2026-37065Kavram kanıtı | Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.CWE-552 | Kritik9,1 | — | %0,5 | 27 Ağu 2026 |
26İzleyin | CVE-2026-37066Kavram kanıtı | Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 aCWE-22 | Orta6,5 | — | %0,5 | 27 Ağu 2026 |
21İzleyin | CVE-2026-37067Kavram kanıtı | Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker tCWE-284 | Orta5,3 | — | %0,3 | 27 Ağu 2026 |
32İzleyin | CVE-2026-37068Kavram kanıtı | Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated uCWE-22 | Yüksek8,1 | — | %0,5 | 27 Ağu 2026 |
21İzleyin | CVE-2026-37069Kavram kanıtı | Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allCWE-200 | Orta5,3 | — | %0,3 | 27 Ağu 2026 |
26İzleyin | CVE-2026-37070Kavram kanıtı | Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read anyCWE-284 | Orta6,5 | — | %0,3 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37071Kavram kanıtı | Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authentCWE-269 | Kritik9,8 | — | %0,5 | 27 Ağu 2026 |
39İzleyin | CVE-2026-37072Kavram kanıtı | Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.CWE-284 | Kritik9,8 | — | %0,5 | 27 Ağu 2026 |
21İzleyin | CVE-2026-37073Kavram kanıtı | Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emaiCWE-284 | Orta5,3 | — | %0,3 | 27 Ağu 2026 |
30İzleyin | CVE-2026-37198İstismar yok | An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP pCWE-190 | Yüksek7,5 | — | %0,6 | 27 Ağu 2026 |
28İzleyin | CVE-2026-54718İstismar yok | Silverstripe Advanced Workflow: Remote code execution via advanced workflow email templatesilverstripe · silverstripe-advancedworkflow · CWE-1336 | Yüksek7,2 | — | %1,0 | 27 Ağu 2026 |
35İzleyin | CVE-2026-54721İstismar yok | Silverstripe UserForms: Remote code execution via userforms email subjectsilverstripe · silverstripe-userforms · CWE-94 | Yüksek8,8 | — | %0,7 | 27 Ağu 2026 |
30İzleyin | CVE-2026-59282İstismar yok | Spring Framework Denial of Service via Unbounded List Growth in Data Bindingvmware · spring framework · CWE-400 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
36İzleyin | CVE-2026-59283İstismar yok | Spring Framework Safety Guard Bypass via SpEL Expression Compilationvmware · spring framework · CWE-913 | Kritik9,1 | — | %0,5 | 27 Ağu 2026 |
30İzleyin | CVE-2026-59284İstismar yok | Spring Cloud Commons no allow list for writable env actuator endpointbroadcom · spring cloud commons · CWE-915 | Yüksek7,6 | — | %0,4 | 27 Ağu 2026 |
32İzleyin | CVE-2026-59285İstismar yok | Spring for GraphQL Unsafe Deserialization in pagination supportvmware · spring for graphql · CWE-502 | Yüksek8,1 | — | %0,4 | 27 Ağu 2026 |
32İzleyin | CVE-2026-59286İstismar yok | Spring for GraphQL loads Untrusted Resources in GraphiQL supportvmware · spring for graphql · CWE-494 | Yüksek8,1 | — | %0,3 | 27 Ağu 2026 |
29İzleyin | CVE-2026-59288İstismar yok | Spring for GraphQL Information Exposure in GraphiQL supportvmware · spring for graphql · CWE-200 | Yüksek7,4 | — | %0,3 | 27 Ağu 2026 |
30İzleyin | CVE-2026-59289İstismar yok | Spring for GraphQL Denial of Service via pagination supportvmware · spring for graphql · CWE-770 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
32İzleyin | CVE-2026-59307İstismar yok | Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale referencevmware · spring integration · CWE-502 | Yüksek8,0 | — | %0,4 | 27 Ağu 2026 |
39İzleyin | CVE-2026-59313İstismar yok | Server Sent Event stream corruption in Spring MVC functional web frameworkvmware · spring framework · CWE-93 | Kritik9,8 | — | %0,5 | 27 Ağu 2026 |
32İzleyin | CVE-2026-59316İstismar yok | Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)broadcom · spring authorization server · CWE-79 | Yüksek8,2 | — | %0,3 | 27 Ağu 2026 |
32İzleyin | CVE-2026-59324İstismar yok | fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunctionvmware · spring integration · CWE-362 | Yüksek8,2 | — | %0,2 | 27 Ağu 2026 |
40Planlayın | CVE-2026-6876İstismar yok | Sandbox Escape in ServiceNow AI Platformservicenow · servicenow ai platform · CWE-94 | Kritik10,0 | — | %0,6 | 27 Ağu 2026 |
42Planlayın | CVE-2026-74820İstismar yok | Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clauseservicenow · servicenow ai platform · CWE-89 | Kritik10,0 | — | %5,1 | 27 Ağu 2026 |
30İzleyin | CVE-2026-75889İstismar yok | CVE-2026-75889 CVE Recordgrafana · alloy · CWE-552 | Yüksek7,7 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-76639Kavram kanıtı | Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversalunitree robotics · g1 edu · CWE-22 | Yüksek8,7 | — | %0,6 | 27 Ağu 2026 |
30İzleyin | CVE-2026-76640İstismar yok | Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stackunitree robotics · g1 edu · CWE-306 | Yüksek7,7 | — | %0,3 | 27 Ağu 2026 |
34İzleyin | CVE-2026-81728İstismar yok | Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keysdolibarr · dolibarr erp\/crm · CWE-89 | Yüksek8,6 | — | %0,4 | 27 Ağu 2026 |
28İzleyin | CVE-2026-81729İstismar yok | Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletiondolibarr · dolibarr erp\/crm · CWE-863 | Yüksek7,1 | — | %0,3 | 27 Ağu 2026 |
35İzleyin | CVE-2026-81730İstismar yok | Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamedolibarr · dolibarr erp\/crm · CWE-22 | Yüksek8,8 | — | %0,5 | 27 Ağu 2026 |
30İzleyin | CVE-2026-81934İstismar yok | Redis TLS pending-data list use-after-freeredis · redis · CWE-416 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2026-5680İstismar yok | Undertow-core: undertow: denial of service via websocket permessage-deflate processingred hat · red hat jboss enterprise application platform 8.1 for rhel 10 · CWE-770 | Yüksek7,5 | — | %1,0 | 27 Ağu 2026 |
30İzleyin | CVE-2026-78002İstismar yok | Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionred hat · red hat enterprise linux 10 · CWE-131 | Yüksek7,5 | — | %0,8 | 27 Ağu 2026 |
33İzleyin | CVE-2026-81679İstismar yok | OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification APIopenremote · openremote · CWE-200 | Yüksek8,3 | — | %0,3 | 27 Ağu 2026 |
32İzleyin | GHSA-mf7q-r4rv-jv94İstismar yok | Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature chGo · github.com/crossplane/crossplane-runtime/v2 · CWE-345 | Yüksek8,0 | — | — | 27 Ağu 2026 |
30İzleyin | GHSA-8x48-8g7j-rqxpİstismar yok | Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y'PyPI · nltk · CWE-407 | Yüksek7,5 | — | — | 27 Ağu 2026 |
28İzleyin | GHSA-4xw3-jf9x-x7mfİstismar yok | Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root filesPyPI · nltk · CWE-59 | Yüksek7,1 | — | — | 27 Ağu 2026 |
28İzleyin | GHSA-hqj7-phwp-c3fpİstismar yok | Duplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed rootsPyPI · nltk · CWE-73 | Yüksek7,0 | — | — | 27 Ağu 2026 |
36İzleyin | CVE-2026-18717İstismar yok | Improper Certificate Validation in ASE 2000applied systems engineering · ase2000 v2 · CWE-295 | Kritik9,1 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2026-18965İstismar yok | Missing Authorization in PayRange APIpayrange · payrange api · CWE-862 | Yüksek8,7 | — | %0,3 | 27 Ağu 2026 |
30İzleyin | CVE-2026-38344İstismar yok | A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to causCWE-476 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2026-38346İstismar yok | An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCWE-190 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2026-38347İstismar yok | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to causCWE-122 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2026-38348İstismar yok | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) vCWE-190 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2026-38349İstismar yok | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCWE-190 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
- CVE-2026-8168037İzleyin
openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8168137İzleyin
openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8168234İzleyin
openssl_encrypt before 1.4.9 Insecure File Permissions
YüksekCVSS 8,6İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8168334İzleyin
openssl_encrypt before 1.4.9 Plaintext Private Key Storage
YüksekCVSS 8,6İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8168537İzleyin
openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8168734İzleyin
openssl_encrypt before 1.4.9 Denial of Service via KDF
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8168834İzleyin
openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8168934İzleyin
openssl_encrypt before 1.4.9 Weak Pepper Key Derivation
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169034İzleyin
verify-usb before 1.4.9 Symlink Directory Traversal Code Execution
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169134İzleyin
openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169234İzleyin
openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8169334İzleyin
openssl_encrypt before 1.4.9 Denial of Service via QR total field
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169437İzleyin
verify-usb before 1.4.9 Output Injection via Unsanitized Filenames
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169537İzleyin
openssl_encrypt before 1.4.9 Terminal Injection via key_id
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169637İzleyin
openssl_encrypt before 1.4.9 Terminal Injection via info Command
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169734İzleyin
openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8169837İzleyin
openssl_encrypt before 1.4.9 Shell Injection via info command
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8169934İzleyin
openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170037İzleyin
openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170137İzleyin
openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170237İzleyin
openssl_encrypt before 1.4.9 Key Substitution via Identity Load
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170334İzleyin
openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170434İzleyin
openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170534İzleyin
openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170637İzleyin
openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8170737İzleyin
openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8171437İzleyin
openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8171534İzleyin
openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8171634İzleyin
openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8171737İzleyin
openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8171834İzleyin
openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl_encrypt27 Ağu 2026
- CVE-2026-8171937İzleyin
openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
KritikCVSS 9,3İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8172134İzleyin
openssl_encrypt before 1.4.9 Denial of Service via KDF
YüksekCVSS 8,7İstismar yokEPSS %0jahlives · openssl encrypt27 Ağu 2026
- CVE-2026-8172234İzleyin
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
YüksekCVSS 8,7İstismar yokEPSS %0nltk · nltk27 Ağu 2026
- CVE-2026-8172633İzleyin
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
YüksekCVSS 8,3İstismar yokEPSS %0nltk · nltk27 Ağu 2026
- CVE-2026-8173540Planlayın
UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
KritikCVSS 10,0İstismar yokEPSS %0bytedance · ui-tars-desktop27 Ağu 2026
- CVE-2026-8181728İzleyin
Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification
YüksekCVSS 7,2İstismar yokEPSS %0flowintel · flowintel27 Ağu 2026
- CVE-2026-8181834İzleyin
Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges
YüksekCVSS 8,6İstismar yokEPSS %0flowintel · flowintel27 Ağu 2026
- CVE-2026-8182636İzleyin
Flowintel Fails to Invalidate Active Sessions After Password Change
KritikCVSS 9,1İstismar yokEPSS %0flowintel · flowintel27 Ağu 2026
- CVE-2026-1003634İzleyin
SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing
YüksekCVSS 8,7Kavram kanıtıEPSS %0speechbrain · speechbrain27 Ağu 2026
- CVE-2026-1888542Planlayın
Unauthenticated Remote Code Execution in GraphQL Composite Data API
KritikCVSS 10,0İstismar yokEPSS %7servicenow · servicenow ai platform27 Ağu 2026
- CVE-2026-1888642Planlayın
Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
KritikCVSS 10,0İstismar yokEPSS %5servicenow · servicenow ai platform27 Ağu 2026
- CVE-2026-1909240Planlayın
Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing
KritikCVSS 9,8Kavram kanıtıEPSS %2unknown · tutor lms27 Ağu 2026
- CVE-2026-2525024İzleyin
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
OrtaCVSS 6,0Kavram kanıtıEPSS %0eazsolution · eazyfix27 Ağu 2026
- CVE-2026-3061239İzleyin
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a
KritikCVSS 9,8İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3586840Planlayın
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.
KritikCVSS 9,8İstismar yokEPSS %227 Ağu 2026
- CVE-2026-3586940Planlayın
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.
KritikCVSS 9,8İstismar yokEPSS %227 Ağu 2026
- CVE-2026-3610228İzleyin
An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate priv
YüksekCVSS 7,2İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3700339İzleyin
Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.
KritikCVSS 9,8İstismar yokEPSS %127 Ağu 2026
- CVE-2026-3700439İzleyin
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute ar
KritikCVSS 9,8İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3700639İzleyin
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code exe
KritikCVSS 9,8İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3700739İzleyin
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path travers
KritikCVSS 9,8İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3701230İzleyin
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via har
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3706421İzleyin
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the app
OrtaCVSS 5,3Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3706536İzleyin
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.
KritikCVSS 9,1Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3706626İzleyin
Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 a
OrtaCVSS 6,5Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3706721İzleyin
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker t
OrtaCVSS 5,3Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3706832İzleyin
Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated u
YüksekCVSS 8,1Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3706921İzleyin
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 all
OrtaCVSS 5,3Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3707026İzleyin
Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any
OrtaCVSS 6,5Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3707139İzleyin
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authent
KritikCVSS 9,8Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3707239İzleyin
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.
KritikCVSS 9,8Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3707321İzleyin
Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emai
OrtaCVSS 5,3Kavram kanıtıEPSS %027 Ağu 2026
- CVE-2026-3719830İzleyin
An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP p
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-5471828İzleyin
Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template
YüksekCVSS 7,2İstismar yokEPSS %1silverstripe · silverstripe-advancedworkflow27 Ağu 2026
- CVE-2026-5472135İzleyin
Silverstripe UserForms: Remote code execution via userforms email subject
YüksekCVSS 8,8İstismar yokEPSS %0silverstripe · silverstripe-userforms27 Ağu 2026
- CVE-2026-5928230İzleyin
Spring Framework Denial of Service via Unbounded List Growth in Data Binding
YüksekCVSS 7,5İstismar yokEPSS %0vmware · spring framework27 Ağu 2026
- CVE-2026-5928336İzleyin
Spring Framework Safety Guard Bypass via SpEL Expression Compilation
KritikCVSS 9,1İstismar yokEPSS %0vmware · spring framework27 Ağu 2026
- CVE-2026-5928430İzleyin
Spring Cloud Commons no allow list for writable env actuator endpoint
YüksekCVSS 7,6İstismar yokEPSS %0broadcom · spring cloud commons27 Ağu 2026
- CVE-2026-5928532İzleyin
Spring for GraphQL Unsafe Deserialization in pagination support
YüksekCVSS 8,1İstismar yokEPSS %0vmware · spring for graphql27 Ağu 2026
- CVE-2026-5928632İzleyin
Spring for GraphQL loads Untrusted Resources in GraphiQL support
YüksekCVSS 8,1İstismar yokEPSS %0vmware · spring for graphql27 Ağu 2026
- CVE-2026-5928829İzleyin
Spring for GraphQL Information Exposure in GraphiQL support
YüksekCVSS 7,4İstismar yokEPSS %0vmware · spring for graphql27 Ağu 2026
- CVE-2026-5928930İzleyin
Spring for GraphQL Denial of Service via pagination support
YüksekCVSS 7,5İstismar yokEPSS %0vmware · spring for graphql27 Ağu 2026
- CVE-2026-5930732İzleyin
Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
YüksekCVSS 8,0İstismar yokEPSS %0vmware · spring integration27 Ağu 2026
- CVE-2026-5931339İzleyin
Server Sent Event stream corruption in Spring MVC functional web framework
KritikCVSS 9,8İstismar yokEPSS %0vmware · spring framework27 Ağu 2026
- CVE-2026-5931632İzleyin
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
YüksekCVSS 8,2İstismar yokEPSS %0broadcom · spring authorization server27 Ağu 2026
- CVE-2026-5932432İzleyin
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
YüksekCVSS 8,2İstismar yokEPSS %0vmware · spring integration27 Ağu 2026
- CVE-2026-687640Planlayın
Sandbox Escape in ServiceNow AI Platform
KritikCVSS 10,0İstismar yokEPSS %0servicenow · servicenow ai platform27 Ağu 2026
- CVE-2026-7482042Planlayın
Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
KritikCVSS 10,0İstismar yokEPSS %5servicenow · servicenow ai platform27 Ağu 2026
- CVE-2026-7588930İzleyin
CVE-2026-75889 CVE Record
YüksekCVSS 7,7İstismar yokEPSS %0grafana · alloy27 Ağu 2026
- CVE-2026-7663934İzleyin
Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal
YüksekCVSS 8,7Kavram kanıtıEPSS %0unitree robotics · g1 edu27 Ağu 2026
- CVE-2026-7664030İzleyin
Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack
YüksekCVSS 7,7İstismar yokEPSS %0unitree robotics · g1 edu27 Ağu 2026
- CVE-2026-8172834İzleyin
Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys
YüksekCVSS 8,6İstismar yokEPSS %0dolibarr · dolibarr erp\/crm27 Ağu 2026
- CVE-2026-8172928İzleyin
Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletion
YüksekCVSS 7,1İstismar yokEPSS %0dolibarr · dolibarr erp\/crm27 Ağu 2026
- CVE-2026-8173035İzleyin
Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filename
YüksekCVSS 8,8İstismar yokEPSS %0dolibarr · dolibarr erp\/crm27 Ağu 2026
- CVE-2026-8193430İzleyin
Redis TLS pending-data list use-after-free
YüksekCVSS 7,5İstismar yokEPSS %0redis · redis27 Ağu 2026
- CVE-2026-568030İzleyin
Undertow-core: undertow: denial of service via websocket permessage-deflate processing
YüksekCVSS 7,5İstismar yokEPSS %1red hat · red hat jboss enterprise application platform 8.1 for rhel 1027 Ağu 2026
- CVE-2026-7800230İzleyin
Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 1027 Ağu 2026
- CVE-2026-8167933İzleyin
OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API
YüksekCVSS 8,3İstismar yokEPSS %0openremote · openremote27 Ağu 2026
- GHSA-mf7q-r4rv-jv9432İzleyin
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature ch
YüksekCVSS 8,0İstismar yokGo · github.com/crossplane/crossplane-runtime/v227 Ağu 2026
- GHSA-8x48-8g7j-rqxp30İzleyin
Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y'
YüksekCVSS 7,5İstismar yokPyPI · nltk27 Ağu 2026
- GHSA-4xw3-jf9x-x7mf28İzleyin
Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files
YüksekCVSS 7,1İstismar yokPyPI · nltk27 Ağu 2026
- GHSA-hqj7-phwp-c3fp28İzleyin
Duplicate Advisory: Model-artifact APIs bypass pathsec and touch files outside allowed roots
YüksekCVSS 7,0İstismar yokPyPI · nltk27 Ağu 2026
- CVE-2026-1871736İzleyin
Improper Certificate Validation in ASE 2000
KritikCVSS 9,1İstismar yokEPSS %0applied systems engineering · ase2000 v227 Ağu 2026
- CVE-2026-1896534İzleyin
Missing Authorization in PayRange API
YüksekCVSS 8,7İstismar yokEPSS %0payrange · payrange api27 Ağu 2026
- CVE-2026-3834430İzleyin
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to caus
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3834630İzleyin
An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3834730İzleyin
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to caus
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3834830İzleyin
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026
- CVE-2026-3834930İzleyin
An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
YüksekCVSS 7,5İstismar yokEPSS %027 Ağu 2026