Threat database

22 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.4	EPSS 1.0%	CVE-2026-7863Pardus Software · OS command injection High8.4EPSS 1.0%2026-09-11CVE Database V5CVE-2026-7863 Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5. EPSS 1.0%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-78	CVE Database V5	2026-09-11
Medium	5.5	EPSS 0.1%	CVE-2026-8304Pardus About · Missing Authorization Medium5.5EPSS 0.1%2026-09-11CVE Database V5CVE-2026-8304 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus About: from 1.2.1 before 1.2.5. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-862	CVE Database V5	2026-09-11
High	7.8	EPSS 0.8%	CVE-2026-8301Pardus Boot Repair · OS command injection High7.8EPSS 0.8%2026-09-11CVE Database V5CVE-2026-8301 Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8. EPSS 0.8%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-78	CVE Database V5	2026-09-11
High	7.8	EPSS 0.1%	CVE-2026-8303Pardus-software · Incorrect privilege assignment High7.8EPSS 0.1%2026-09-11CVE Database V5CVE-2026-8303 Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-266	CVE Database V5	2026-09-11
Low	3.3	EPSS 0.1%	CVE-2026-11765Pardus Pen · argument injection Low3.3EPSS 0.1%2026-09-11CVE Database V5CVE-2026-11765 Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-88	CVE Database V5	2026-09-11
High	7.8	EPSS 0.8%	CVE-2026-16287pardus-update · OS command injection High7.8EPSS 0.8%2026-07-23CVE Database V5CVE-2026-16287 Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0. EPSS 0.8%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-78	CVE Database V5	2026-07-23
High	7.8	EPSS 0.1%	CVE-2026-6509Pardus Update · Missing Authorization High7.8EPSS 0.1%2026-07-05CVE Database V5CVE-2026-6509 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation. This issue affects Pardus Update: from <=0.6.3 before 0.6.6. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-862	CVE Database V5	2026-07-05
High	8.8	EPSS 0.1%	CVE-2026-9085Pardus-Parental-Control · Incorrect Permission Assignment for Critical Resource High8.8EPSS 0.1%2026-07-05CVE Database V5CVE-2026-9085 Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from <=0.5.1 before 0.7.0. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-732 #cwe-284	CVE Database V5	2026-07-05
Low	3.9	EPSS 0.1%	CVE-2026-12386Pardus Pen · Improper null termination Low3.9EPSS 0.1%2026-07-05CVE Database V5CVE-2026-12386 Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers. This issue affects Pardus Pen: from <=4.1.5 before 4.2.1. EPSS 0.1%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-170	CVE Database V5	2026-07-05
High	7.9	EPSS 0.2%	CVE-2026-12250Pardus Domain Joiner · Invocation of process using visible sensitive information High7.9EPSS 0.2%2026-07-05CVE Database V5CVE-2026-12250 Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4. EPSS 0.2%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-214	CVE Database V5	2026-07-05
High	8.8	EPSS 0.2%	CVE-2026-14460pardus-software · Missing Authorization High8.8EPSS 0.2%2026-07-03CVE Database V5CVE-2026-14460 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5. EPSS 0.2%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-862	CVE Database V5	2026-07-03
High	8.8	EPSS 0.2%	CVE-2026-14459pardus-software · argument injection High8.8EPSS 0.2%2026-07-03CVE Database V5CVE-2026-14459 Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from <= 1.0.4 before 1.0.5. EPSS 0.2%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-88	CVE Database V5	2026-07-03
Critical	9.8	EPSS 0.3%	CVE-2026-6508Liderahenk · Origin Validation Error Critical9.8EPSS 0.3%2026-05-07CVE Database V5CVE-2026-6508 Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Liderahenk: from 2.0.1 before 2.0.2. EPSS 0.3%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-346	CVE Database V5	2026-05-07
High	8.8	EPSS 1.4%	CVE-2026-6849Pardus OS My Computer · OS command injection High8.8EPSS 1.4%2026-04-29CVE Database V5CVE-2026-6849 Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0. EPSS 1.4%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-78	CVE Database V5	2026-04-29
Critical	9.6	EPSS 0.5%	CVE-2026-5166Pardus Software Center · Path Traversal Critical9.6EPSS 0.5%2026-04-29CVE Database V5CVE-2026-5166 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4. EPSS 0.5%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-22	CVE Database V5	2026-04-29
High	8.8	EPSS 0.5%	CVE-2026-5161Pardus About · link following High8.8EPSS 0.5%2026-04-29CVE Database V5CVE-2026-5161 Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2. EPSS 0.5%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-59	CVE Database V5	2026-04-29
High	8.8	EPSS 0.4%	CVE-2026-5141Pardus Software Center · Improper Privilege Management High8.8EPSS 0.4%2026-04-29CVE Database V5CVE-2026-5141 Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3. EPSS 0.4%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-269 #cwe-284 #cwe-266	CVE Database V5	2026-04-29
High	8.8	EPSS 0.6%	CVE-2026-5140Pardus Update · CRLF injection High8.8EPSS 0.6%2026-04-29CVE Database V5CVE-2026-5140 Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4. EPSS 0.6%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-93	CVE Database V5	2026-04-29
High	7.5	EPSS 0.8%	CVE-2026-2339Liderahenk · Missing Authentication for Critical Function High7.5EPSS 0.8%2026-03-10CVE Database V5CVE-2026-2339 Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection. This issue affects Liderahenk: before 3.5.1. EPSS 0.8%Vulnerability TUBITAK BILGEM Software Technologies Research Institute #cwe-306	CVE Database V5	2026-03-10

Showing 1–20 of 22 results · 1 duplicate CVE record merged