Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

CVE güvenlik açıkları, KEV etiketleri, detay sayfaları ve kategori bazlı listeleme.
Toplam kayıt70,909
Sayfa3373 / 3546
FiltreYok
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9498

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9497

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9496

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9495

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9494

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:11

CVE-2024-9493

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in the  ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:10

CVE-2024-9492

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:10

CVE-2024-9491

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
High CVSS: 8.6 Yayın: 2025-01-24 15:15:10

CVE-2024-9490

CWE-427
DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs (8-bit) IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.
Medium CVSS: 5.5 Yayın: 2025-01-24 14:15:31

CVE-2024-57184

Gpac Gpac CWE-120
An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163 that can cause a denial of service (DOS) via a crafted MP4 file.
Medium CVSS: 5.4 Yayın: 2025-01-24 14:15:31

CVE-2024-11913

Buddydev Activity Plus Reloaded For Buddypress CWE-918
The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function. This makes it possible for authenticated attackers, wi…
Medium CVSS: 4.3 Yayın: 2025-01-24 14:15:30

CVE-2024-10324

Rometheme Romethemekit For Elementor CWE-1230
The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenti…
High CVSS: 7.8 Yayın: 2025-01-24 14:15:29

CVE-2022-47090

CWE-120
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_tile_columns
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23889

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23888

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23885

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anildhiman MJ Contact us mj-contact-us allows Reflected XSS.This issue affects MJ Contact us: from n/a through
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23839

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asif Shakeel Sticky Button sticky-chat-button allows Stored XSS.This issue affects Sticky Button: from n/a through
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23838

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rally Vincent Bauernregeln bauernregeln allows Reflected XSS.This issue affects Bauernregeln: from n/a through
High CVSS: 7.1 Yayın: 2025-01-24 11:15:11

CVE-2025-23837

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martinjuhasz One Backend Language one-backend-language allows Reflected XSS.This issue affects One Backend Language: from n/a through