Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-112054
orta		schroedinger: schroedinger: Denial of Service via divide-by-zero error in Dirac stream parsing07:11 UTC derlemesi
CVE-2026-112053
orta		schroedinger: schroedinger: Denial of Service via out-of-bounds read07:11 UTC derlemesi
CVE-2026-112052
orta		libspatialite: libspatialite: Denial of Service via integer overflow during geometry parsing07:11 UTC derlemesi
CVE-2026-112048
orta		libspatialite: libspatialite: Denial of Service via uncontrolled memory allocation during polygon parsing07:11 UTC derlemesi
CVE-2026-112046
orta		org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve()07:11 UTC derlemesi
CVE-2026-112007
orta		schismtracker: Schism Tracker: Denial of Service via crafted ULT module file07:11 UTC derlemesi
CVE-2026-112006
orta		opentelemetry-exporter-otlp-proto-http: opentelemetry-exporter-otlp-proto-http: Information disclosure via improper TLS certificate validation07:11 UTC derlemesi
CVE-2026-111997
orta		ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input07:11 UTC derlemesi
CVE-2026-89088
orta		parted: parted: Denial of Service via heap buffer overflow during FAT16 resize07:11 UTC derlemesi
CVE-2026-89085
orta		parted: parted: Heap-based buffer overflow via crafted FAT32 filesystem image07:11 UTC derlemesi
CVE-2026-96628
orta		Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`07:11 UTC derlemesi
CVE-2026-85985
orta		mariadb: MariaDB: Unauthorized file access via CONNECT engine functions07:11 UTC derlemesi
CVE-2026-85745
orta		mariadb: mariadb: out-of-bounds read in ST_Area with crafted MULTIPOLYGON07:11 UTC derlemesi
CVE-2026-111377
orta		freerdp: FreeRDP: Denial of Service via unbounded static channel reassembly07:11 UTC derlemesi
CVE-2026-111376
orta		freerdp: freerdp: Denial of Service via short clipboard response07:11 UTC derlemesi
CVE-2026-111374
orta		freerdp: freerdp: Denial of Service via unadvertised camera stream requests07:11 UTC derlemesi
CVE-2026-111272
orta		LibRaw: LibRaw: Denial of Service via heap-based out-of-bounds read in Nikon metadata parser07:11 UTC derlemesi
CVE-2026-110916
orta		chromium-browser: Improper input validation in Desktop07:11 UTC derlemesi
CVE-2026-110915
orta		chromium-browser: Use after free in Compositing07:11 UTC derlemesi
CVE-2026-110914
orta		chromium-browser: Memory corruption in Workers07:11 UTC derlemesi
CVE-2026-92707
orta		dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits07:11 UTC derlemesi
CVE-2026-63430
orta		ammonia: ammonia: Cross-site scripting via improper MathML namespace handling07:11 UTC derlemesi
CVE-2026-62322
orta		social-auth-core: social-auth-core: unauthorized account access via missing OAuth state validation in LINE backend07:11 UTC derlemesi
CVE-2026-111142
orta		zziplib: zziplib: Denial of Service via out-of-bounds read in ZIP central directory parsing07:11 UTC derlemesi
CVE-2026-111129
orta		assimp: assimp: Denial of Service via invalid animation track targets07:11 UTC derlemesi
CVE-2026-111128
orta		assimp: assimp: Denial of Service via NULL pointer dereference in Ogre3D importer07:11 UTC derlemesi
CVE-2026-109131
orta		ansible-ui: ansible-ui: stored XSS via unsafe javascript URL scheme in Hub collection module documentation (formatPartURL)07:11 UTC derlemesi
CVE-2026-61702
orta		cups: cups: Information disclosure via path traversal in banner processing07:11 UTC derlemesi
CVE-2026-55480
orta		cups: cups: Arbitrary file overwrite via insecure temporary file handling07:11 UTC derlemesi
CVE-2026-55414
orta		NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)07:11 UTC derlemesi
CVE-2026-54683
orta		NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)07:11 UTC derlemesi
CVE-2026-104266
orta		tinytag: tinytag: Denial of Service via infinite loop in M4A parser07:11 UTC derlemesi
CVE-2026-102631
orta		In authd before 0.7.1, the user identity matching in UpdateUser ( ...07:11 UTC derlemesi
CVE-2026-102527
orta		Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes07:11 UTC derlemesi
CVE-2026-88753
orta		markdown2: markdown2: Denial of Service via crafted Markdown document07:11 UTC derlemesi
CVE-2026-100350
orta		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding07:11 UTC derlemesi
CVE-2026-100348
orta		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions07:11 UTC derlemesi
CVE-2026-100347
orta		github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths07:11 UTC derlemesi
CVE-2026-98432
orta		kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period07:11 UTC derlemesi
CVE-2026-19864
orta		org.eclipse.jetty/jetty-security: Eclipse Jetty: Plaintext password disclosure via session persistence07:11 UTC derlemesi
CVE-2026-18662
orta		org.eclipse.jetty/jetty-security: Eclipse Jetty: Access control bypass via improper security constraint combination07:11 UTC derlemesi
CVE-2026-18659
orta		org.eclipse.jetty/jetty-security: Eclipse Jetty: Security constraint bypass via HTTP method substrings07:11 UTC derlemesi
CVE-2026-76184
orta		org.eclipse.jetty/jetty-client: org.eclipse.jetty/jetty-http-tools: jetty-client: Information disclosure via improper redirect path normalization07:11 UTC derlemesi
CVE-2026-76182
orta		org.eclipse.jetty/jetty-server: org.eclipse.jetty.ee10/jetty-ee10-servlets: org.eclipse.jetty.ee9/jetty-ee9-servlets: org.eclipse.jetty.ee8/jetty-ee8-servlets: Eclipse Jetty: Query parameter injection via unescaped URI paths07:11 UTC derlemesi
CVE-2026-103224
orta		io.vertx/vertx-mysql-client: vertx-mysql-client: Denial of Service via unbounded memory allocation during packet decoding07:11 UTC derlemesi
CVE-2026-103223
orta		io.vertx/vertx-pg-client: vertx-pg-client: Denial of Service via unvalidated message length07:11 UTC derlemesi
CVE-2026-102477
orta		io.vertx/vertx-grpc-server: vertx-grpc-server: Denial of Service via compression bomb07:11 UTC derlemesi
CVE-2026-102461
orta		io.vertx/vertx-json-schema: vertx-json-schema: Denial of Service via inefficient uniqueItems array validation07:11 UTC derlemesi
CVE-2025-23390
orta		Fleet doesn’t validate a server’s certificate when connecting through SSH07:11 UTC derlemesi
CVE-2026-102475
orta		io.vertx/vertx-http-proxy: vertx-http-proxy: Denial of Service via unbounded memory allocation in body transformer07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.