iletisim@usom.gov.tr
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS iletisim@usom.gov.tr
03
assessed vulnerabilities (861)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-18205US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Refle… | ||||
| CVE-2026-15575US | medium5.3OT elevated | — | ||
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces.
This issue affects Costifier: through 2026-10-16. NOTE: The v… | ||||
| CVE-2026-15219US | medium6.5 | — | ||
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers.
This issue affects Costifier… | ||||
| CVE-2026-14177US | high7.5 | — | ||
Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting.
This issue affects ikas E-Commerce Infrastructure… | ||||
| CVE-2026-16741US | critical9.8 | — | ||
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber De… | ||||
| CVE-2026-16740US | critical9.8OT elevated | — | ||
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allow… | ||||
| CVE-2026-89279US | medium6.5 | — | ||
Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.
This issue affects authtake: from v1.3 before v1.4. | ||||
| CVE-2026-13138US | high8.6 | — | ||
Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.
This issue affects Bi… | ||||
| CVE-2026-18390US | — | — | ||
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Technology UYAP D… | ||||
| CVE-2026-12613US | — | — | ||
Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justi… | ||||
| CVE-2026-90983US | high8.2 | — | ||
Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass.
This issue affects Hayat Mobile: from 3… | ||||
| CVE-2026-92085US | medium5.4 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Soft… | ||||
| CVE-2026-86405US | critical9.8 | — | ||
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improp… | ||||
| CVE-2026-85531US | critical9.8 | — | ||
Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper… | ||||
| CVE-2026-12859US | medium6.5OT elevated | — | ||
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects… | ||||
| CVE-2026-91844US | high7.3 | — | ||
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files.
This issue affects… | ||||
| CVE-2026-89290US | low3.5 | — | ||
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS.… | ||||
| CVE-2026-19218US | critical9.1 | — | ||
Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploita… | ||||
| CVE-2026-92555US | — | Exploit | ||
Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data f… | ||||
| CVE-2026-19083US | high8.8 | — | ||
Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Prop… | ||||