CVE Zafiyet Arşivi

# 436 Zafiyet

Severity:

Platform:

TARİH	CVE Kodu	Zafiyet Açıklaması	CVSS / Seviye	Platformlar
2026-07-31	CVE-2026-24727	CVE-2026-24727 - SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type	4.0 (CRITICAL)
2026-07-31	CVE-2026-49743	CVE-2026-49743 - GPU DDK - Write UAF of sync checkpoint in GPU kick function after export fence file descriptor is prematurely closed	3.1 (HIGH)
2026-07-31	CVE-2026-49744	CVE-2026-49744 - GPU DDK - Unchecked ui32TracePointer in rgxfw_log_ex()	3.1 (HIGH)
2026-07-31	CVE-2026-49745	CVE-2026-49745 - GPU DDK - Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0	3.1 (HIGH)
2026-07-31	CVE-2026-56391	CVE-2026-56391 - Out‑of‑bounds Read in GNU coreutils	4.0 (MEDIUM)
2026-07-31	CVE-2026-56392	CVE-2026-56392 - Heap-based Buffer Overflow in GNU coreutils	4.0 (LOW)
2026-07-31	CVE-2026-63317	CVE-2026-63317 - Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML	3.1 (MEDIUM)
2026-07-31	CVE-2026-16910	CVE-2026-16910 - Quay: ssrf in red hat quay notification webhooks (slack/generic)	3.1 (MEDIUM)	Linux
2026-07-31	CVE-2026-15665	CVE-2026-15665 - Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute	3.1 (MEDIUM)
2026-07-31	CVE-2026-15333	CVE-2026-15333 - Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute	3.1 (MEDIUM)
2026-07-31	CVE-2026-15755	CVE-2026-15755 - Open User Map <= 1.4.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes	3.1 (MEDIUM)
2026-07-31	CVE-2026-15334	CVE-2026-15334 - Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute	3.1 (MEDIUM)
2026-07-31	CVE-2026-15648	CVE-2026-15648 - Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute	3.1 (MEDIUM)
2026-07-31	CVE-2026-12654	CVE-2026-12654 - Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret	3.1 (MEDIUM)
2026-07-31	CVE-2026-15653	CVE-2026-15653 - Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter	3.1 (MEDIUM)
2026-07-31	CVE-2026-15464	CVE-2026-15464 - WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute	3.1 (MEDIUM)
2026-07-31	CVE-2026-16519	CVE-2026-16519 - GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability	3.1 (HIGH)
2026-07-31	CVE-2026-12497	CVE-2026-12497 - ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection	3.1 (HIGH)
2026-07-31	CVE-2026-12688	CVE-2026-12688 - ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery	3.1 (MEDIUM)
2026-07-31	CVE-2026-12689	CVE-2026-12689 - ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization	3.1 (MEDIUM)
2026-07-31	CVE-2026-12690	CVE-2026-12690 - ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization	3.1 (LOW)
2026-07-31	CVE-2026-12877	CVE-2026-12877 - Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter	3.1 (CRITICAL)
2026-07-31	CVE-2026-12981	CVE-2026-12981 - CAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password Reset	3.1 (HIGH)
2026-07-31	CVE-2026-14172	CVE-2026-14172 - Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation	3.1 (HIGH)
2026-07-31	CVE-2026-14603	CVE-2026-14603 - WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection	3.1 (HIGH)