Search vulnerabilities

Results 34

Export CSV
CVE-2026-94434

OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.8 before 1.0.9.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
CVE-2026-105422

Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repair

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal. This issue affects pardus-boot-repair: from 1.0.9 before 1.1.0.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
CVE-2026-92606

TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus MyComputer

Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus MyComputer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue affects Pardus MyComputer: from 0.8.0 before 0.8.1.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
CVE-2026-92080

Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal. This issue affects pardus-boot-repair: from 1.0.8 before 1.1.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-92886

Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation. This issue affects eta-register: from 2.0.8 before 2.0.9.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Products
CVE-2026-11765

Argument Injection in TUBITAK BILGEM's Pardus Pen

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Products
CVE-2026-8301

OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
CVE-2026-8304

Information Disclosure in TUBITAK BILGEM's Pardus About

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus About: from 1.2.1 before 1.2.5.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-7863

OS Command Injection in TUBITAK BILGEM's Pardus Software

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-79617

Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
CVE-2026-75896

Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords. This issue affects Liderahenk: before 3.5.5.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Products
CVE-2026-19271

Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Products
CVE-2026-19702

OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
CVE-2026-18806

Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
CVE-2026-18915

Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-18642

Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock

Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Products
CVE-2026-14459

Argument Injection in TUBITAK BILGEM's pardus-software

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products