Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: TÜBİTAK BİLGEM Software Technologies Research Institute Clear all filters
TI-2026-85904 CVE-2026-105422 · GHSA-f2c6-p4f4-q5ff

Path traversal in TÜBİTAK BİLGEM pardus-boot-repair

Priority LOW 28

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-boot-repair allows Path Traversal.

CVSS 3.1MEDIUM 6.6 Physical No auth User interaction EPSS 0.00175 Published 2026-11-06 Fixed in 1.1.0 CWE-22
TI-2026-85395 CVE-2026-95652 · GHSA-2w45-vhrc-j6gv

Excess privileges in pardus-usb-formatter let users format disks

Priority LOW 28

Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.0014 Published 2026-11-05 Fixed in 0.7.2 CWE-250
TI-2026-84989 CVE-2026-19731 · GHSA-cgwj-vcgg-qcjc

Path traversal in TÜBİTAK BİLGEM İmzager

Priority LOW 15

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00127 Published 2026-11-04 Fixed in 2.10.7 CWE-22
TI-2026-84988 CVE-2026-19721 · GHSA-hggc-fwq7-pw8h

Improper XML external entity restriction in TÜBİTAK BİLGEM İmzager

Priority LOW 15

Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0011 Published 2026-11-04 Fixed in 2.10.7 CWE-611
TI-2026-83798 CVE-2026-92886 · GHSA-wc8q-j59v-43c2

Privilege escalation in TÜBİTAK BİLGEM eta-register

Priority LOW 35

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-11-02 Fixed in 2.0.9 CWE-862
TI-2026-55130 CVE-2026-79617 · GHSA-3584-rwvv-wp47

Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

Priority LOW 32

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Level…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00143 Published 2026-09-09 Fixed in 0.4.15 CWE-732
TI-2026-15985 CVE-2026-19702 · GHSA-r8hh-g4qp-57p7

OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Priority LOW 38

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00817 Published 2026-08-31 Fixed in 1.0.8 CWE-78
TI-2026-15720 CVE-2026-19271 · GHSA-24r5-pqg8-wx72

Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

Priority LOW 39

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-08-26 Fixed in 3.5.5 CWE-90
TI-2026-53129 CVE-2026-75896 · GHSA-7wqv-c2hc-jg8f

Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

Priority MEDIUM 47

Use of Hard-coded Credentials vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Try Common or Default Usernames and Passwords.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-08-26 Fixed in 3.5.5 CWE-798