Ara

ID	Zafiyet	Bu seviyede olduğu tarih	Yayın
CVE-2026-101295 orta	oc-mirror: oc-mirror: Path traversal / arbitrary file write in operator catalog image extraction	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
GHSA-96h4-vgxj-gvm2 orta	Nest: Unbounded memory growth in the NestJS TCP microservice transport	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-103118 orta	GraphicsMagick: GraphicsMagick: Denial of Service via uncontrolled recursion in WPG file handler	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-13720 orta	grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-13719 orta	github.com/grafana/grafana: Grafana: Information disclosure via alert rules list API	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-94029 orta	org.apache.sshd/sshd-sftp: Apache MINA SSHD: Denial of Service via memory exhaustion in SFTP check-file extension	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102588 orta	Moodle: csrf in xml grade import	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102586 orta	Moodle: xss via password reset link due to insufficient username escaping	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102585 orta	Moodle: group validation missing when enrolling user to course	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102584 orta	Moodle: missing capability check allows unauthorised grade penalty recalculation	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102582 orta	Moodle: manual enrolment page accessible when plugin disabled	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102581 orta	Moodle: xss in forum post templates due to insufficient escaping	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102580 orta	Moodle: arbitrary class instantiation via report builder audience classname	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102579 orta	Moodle: user profile information disclosure via grade web service	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-102577 orta	Moodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-92872 orta	pgpool-II: pgpool-II: Information disclosure via log files	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-92869 orta	pgpool-II: pgpool-II: Denial of Service via out-of-bounds write	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
CVE-2026-92868 orta	pgpool-II: pgpool-II: Authentication bypass via improper certificate validation	en geç 24 Eki 202607:11 UTC derlemesi	30 Eyl 2026
GHSA-g57g-f23g-4646 orta	Nodemailer: Quoted local-part can produce malformed envelope recipient through RFC 5322 comment parsing	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
GHSA-p634-w6r4-rjp2 orta	adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
GHSA-c6fg-446q-cg94 orta	adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-74225 orta	U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp ...	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-74222 orta	U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget i	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-74221 orta	U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_r ...	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-74220 orta	U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply ...	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-71971 orta	U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an ou ...	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-81842 orta	grafana: grafana: Authorization bypass via missing destination folder permission check	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-81841 orta	grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102938 orta	virtualenv: virtualenv: Arbitrary code execution via configuration injection in prompt values	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102904 orta	jupyterlab: JupyterLab: Information disclosure via extension uninstallation argument injection	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102620 orta	poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102325 orta	chromium-browser: skia: chromium-browser: Uninitialized resource in Skia	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102320 orta	chromium-browser: chromium-browser: Missing authorization in CORS	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102312 orta	chromium-browser: chromium-browser: UI misrepresentation in Omnibox	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102310 orta	chromium-browser: chromium-browser: Missing authorization in Payments	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102305 orta	chromium-browser: chromium-browser: UI misrepresentation in SignIn	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102303 orta	chromium-browser: chromium-browser: Uninitialized resource in GPU	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102300 orta	chromium-browser: chromium-browser: Uninitialized resource in WebGPU	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102830 orta	jupyterlab: jupyterlite-core: JupyterLab: Arbitrary code execution via crafted language pack	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102824 orta	russh: russh: Cryptographic fallback bypass via missing public key validation	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102821 orta	russh: russh: Denial of Service via unbounded memory exhaustion during stalled key renegotiation	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-102820 orta	pageant: pageant: Denial of Service via untrusted response length in shared memory	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
GHSA-8vvx-rff5-p5rq orta	Nodemailer: Nested structured recipient arrays bypass the parser depth limit and cause stack exhaustion DoS	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95384 orta	chromium-browser: Race condition in Transactions Platform	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95382 orta	chromium-browser: Improper input validation in Auth	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95381 orta	chromium-browser: Improper input validation in Printing	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95376 orta	chromium-browser: Externally controlled reference in DevTools	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95375 orta	chromium-browser: Incorrect authorization in BrowserTag	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95374 orta	chromium-browser: Incorrect authorization in Network	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026
CVE-2026-95371 orta	chromium-browser: Missing authorization in Views	en geç 24 Eki 202607:11 UTC derlemesi	29 Eyl 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.