Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

CVE güvenlik açıkları, KEV etiketleri, detay sayfaları ve kategori bazlı listeleme.
Toplam kayıt69,184
Sayfa3446 / 3460
FiltreYok
Medium CVSS: 4.3 Yayın: 2025-01-02 15:15:19

CVE-2023-39994

Reputeinfosystems Armember CWE-862
Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2.
Medium CVSS: 5.4 Yayın: 2025-01-02 15:15:18

CVE-2023-32240

CWE-862
Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WoodMart: from n/a through 7.2.1.
Medium CVSS: 5.5 Yayın: 2025-01-02 15:15:18

CVE-2022-49035

Linux Linux Kernel CWE-770
In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case.
Medium CVSS: 4.3 Yayın: 2025-01-02 15:15:18

CVE-2022-43476

CWE-862
Missing Authorization vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subscribe to Category: from n/a through 2.7.4.
Medium CVSS: 4.3 Yayın: 2025-01-02 15:15:17

CVE-2022-41995

CWE-862
Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8.
Medium CVSS: 4.3 Yayın: 2025-01-02 14:15:07

CVE-2024-38732

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in VolThemes Patricia Blog allows Cross Site Request Forgery.This issue affects Patricia Blog: from n/a through 1.2.
Medium CVSS: 4.3 Yayın: 2025-01-02 14:15:07

CVE-2024-38731

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in Marsian i-amaze allows Cross Site Request Forgery.This issue affects i-amaze: from n/a through 1.3.7.
Medium CVSS: 4.3 Yayın: 2025-01-02 14:15:07

CVE-2024-37931

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in Creativthemes Point allows Cross Site Request Forgery.This issue affects Point: from n/a through 1.1.
Medium CVSS: 5.4 Yayın: 2025-01-02 14:15:07

CVE-2024-37925

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in BUDDYBOSS LLC BuddyBoss Theme allows Cross Site Request Forgery.This issue affects BuddyBoss Theme: from n/a through 2.4.61.
Medium CVSS: 4.3 Yayın: 2025-01-02 14:15:07

CVE-2024-37452

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop Schema Lite allows Cross Site Request Forgery.This issue affects Schema Lite: from n/a through 1.2.2.
Medium CVSS: 5.4 Yayın: 2025-01-02 14:15:06

CVE-2024-37438

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Cross Site Request Forgery.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.
Medium CVSS: 4.3 Yayın: 2025-01-02 14:15:06

CVE-2024-37241

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager - Resume Manager allows Cross Site Request Forgery.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0.
Unknown CVSS: - Yayın: 2025-01-02 14:15:06

CVE-2024-37237

CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in fs-code FS Poster fs-poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through
Medium CVSS: 6.3 Yayın: 2025-01-02 14:15:06

CVE-2024-13111

Kaoshifeng Yunfan Learning Examination System CWE-287
A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/control…
Medium CVSS: 5.3 Yayın: 2025-01-02 14:15:06

CVE-2024-13110

Kaoshifeng Yunfan Learning Examination System CWE-200
A vulnerability classified as problematic has been found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected is an unknown function of the file src/main/java/com/yf/exam/modules/paper/controller/PaperController.ja…
Unknown CVSS: - Yayın: 2025-01-02 13:15:08

CVE-2024-56268

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through
Unknown CVSS: - Yayın: 2025-01-02 13:15:07

CVE-2024-56257

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolPlugins Coins MarketCap coins-marketcap allows DOM-Based XSS.This issue affects Coins MarketCap: from n/a through
High CVSS: 7.1 Yayın: 2025-01-02 13:15:07

CVE-2024-56014

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivia allows Reflected XSS.This issue affects Olivia: from n/a through 0.9.5.
High CVSS: 8.8 Yayın: 2025-01-02 13:15:07

CVE-2024-39623

Cridio Listingpro CWE-352
Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through