Vulnerabilidades de TUBITAK BILGEM Software Technologies Research Institute
CVEs publicadas que afetam produtos de TUBITAK BILGEM Software Technologies Research Institute: 28 registro(s), com severidade, exploração e correções.
Liderahenk 5Pardus-software 4Pardus Update 3Pardus Software Center 2Pardus About 2Pardus Pen 2Eta-otp-lock 2Pardus Boot Repair 2Pardus OS My Computer 1Pardus Domain Joiner 1Pardus-Parental-Control 1Pardus-image-writer 1Pardus-domain-joiner 1Pardus LightDM Greeter 1
CVE-2026-8304
Média · 5.5
CWE-862 11/09/2026
Information Disclosure in TUBITAK BILGEM's Pardus About
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Pardus About: from 1.2.1 before 1.2.5.
CVE-2026-7863
Alta · 8.4
CWE-78 11/09/2026
OS Command Injection in TUBITAK BILGEM's Pardus Software
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection.
This issue affects Pardus Software: before 1.0.5.
CVE-2026-8303
Alta · 7.8
CWE-266 11/09/2026
Privilege Escalation in TUBITAK BILGEM's Pardus-software
Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation.
This issue affects Pardus-software: before 1.0.5.
CVE-2026-8301
Alta · 7.8
CWE-78 11/09/2026
OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.
This issue affects Pardus Boot Repair: before 1.0.8.
CVE-2026-11765
Baixa · 3.3
CWE-88 11/09/2026
Argument Injection in TUBITAK BILGEM's Pardus Pen
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection.
This issue affects Pardus Pen: before 4.2.1.
CVE-2026-79617
Alta · 7.1
CWE-732 09/09/2026
Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Pardus LightDM Greeter: before 0.4.15.
CVE-2026-19702
Alta · 7.8
CWE-78 31/08/2026
OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.
This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8.
CVE-2026-75896
Crítica · 9.1
CWE-798 26/08/2026
Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk
Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords.
This issue affects Liderahenk: before 3.5.5.
CVE-2026-19271
Alta · 7.5
CWE-90 26/08/2026
Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection.
This issue affects Liderahenk: from 3.4.0 before 3.5.5.
CVE-2026-15599
Baixa · 3.3
CWE-283 06/08/2026
Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.
This issue affects pardus-domain-joiner: before 0.5.5.
CVE-2026-18915
Média · 5.0
CWE-214 06/08/2026
Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting.
This issue affects eta-otp-lock: before 1.0.4.
CVE-2026-18806
Alta · 7.1
CWE-73 04/08/2026
Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality.
This issue affects pardus-image-writer: before 0.9.0.
CVE-2026-18642
Alta · 7.8
CWE-502 03/08/2026
Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection.
This issue affects eta-otp-lock: before 1.0.4.
CVE-2026-16287
Alta · 7.8
CWE-78 23/07/2026
Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection.
This issue affects pardus-update: from 0.6.6 before 0.7.0.
CVE-2026-9085
Alta · 8.8
CWE-284 05/07/2026
DNS Hijacking in TUBITAK BILGEM's Pardus-Parental-Control
Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing.
This issue affects Pardus-Parental-Control: from <=0.5.1 before 0.7.0.
CVE-2026-6509
Alta · 7.8
CWE-862 05/07/2026
Privilege Escalation in TUBITAK BILGEM's Pardus Update
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Privilege Escalation.
This issue affects Pardus Update: from <=0.6.3 before 0.6.6.
CVE-2026-12386
Baixa · 3.9
CWE-170 05/07/2026
Buffer Overflow in TUBITAK BILGEM's Pardus Pen
Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Overflow Buffers.
This issue affects Pardus Pen: from <=4.1.5 before 4.2.1.
CVE-2026-12250
Alta · 7.9
CWE-214 05/07/2026
Sensitive Data Exposure in TUBITAK BILGEM's Pardus Domain Joiner
Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation.
This issue affects Pardus Domain Joiner: from 0.5.2 before 0.5.4.
CVE-2026-14460
Alta · 8.8
CWE-862 03/07/2026
Missing Authorization in TUBITAK BILGEM's pardus-software
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.
This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
CVE-2026-14459
Alta · 8.8
CWE-88 03/07/2026
Argument Injection in TUBITAK BILGEM's pardus-software
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.
This issue affects pardus-software: from <= 1.0.4 before 1.0.5.
CVE-2026-6508
Crítica · 9.8
CWE-346 07/05/2026
Erro de Validação de Origem no Liderahenk (TUBITAK BILGEM) Permitindo Acesso a Funcionalidade Mal Restringida
Vulnerabilidade de Erro de Validação de Origem no Liderahenk do TUBITAK BILGEM Software Technologies Research Institute permite o Acesso a Funcionalidade Não Devidamente Restringida por ACLs.
Esta falha afeta o Liderahenk: da versão 2.0.1 até antes da 2.0.2.
CVE-2026-6849
Alta · 8.8
CWE-78 29/04/2026
OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus OS My Computer allows OS Command Injection.
This issue affects Pardus OS My Computer: from <=0.7.5 before 0.8.0.
CVE-2026-5166
Crítica · 9.6
CWE-22 29/04/2026
Path Traversal no Pardus Software Center da TUBITAK BILGEM
Vulnerabilidade de Limitação Imprópria de um Nome de Caminho para um Diretório Restrito ('Path Traversal') no Pardus Software Center do Instituto de Pesquisa em Tecnologias de Software TUBITAK BILGEM, que permite Path Traversal.
Esta falha afeta o Pardus Software Center: versões anteriores à 0.6.4.
CVE-2026-5161
Alta · 8.8
CWE-59 29/04/2026
Improper Authentication in TUBITAK BILGEM's Pardus About
Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack.
This issue affects Pardus About: before 1.2.2.
CVE-2026-5141
Alta · 8.8
CWE-266 29/04/2026
Improper Access Control in TUBITAK BILGEM's Pardus Software Center
Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process.
This issue affects Pardus Software Center: from 1.0.2 before 1.0.3.