CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-49602

    🚨 CVE-2025-49602 An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid...

  • CVE-2026-104623

    🚨 CVE-2026-104623 A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher...

  • CVE-2026-112816

    🚨 CVE-2026-112816 Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11...

  • CVE-2026-115642

    🚨 CVE-2026-115642 In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession...

  • CVE-2026-119116

    🚨 CVE-2026-119116 A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS...

  • CVE-2026-119148

    🚨 CVE-2026-119148 Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS...

  • CVE-2026-119298

    🚨 CVE-2026-119298 croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the...

  • CVE-2026-119299

    🚨 CVE-2026-119299 gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes...

  • CVE-2026-119300

    🚨 CVE-2026-119300 Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and...

  • CVE-2026-119365

    🚨 CVE-2026-119365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player...

  • CVE-2026-119367

    🚨 CVE-2026-119367 Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting...

  • CVE-2026-119466

    🚨 CVE-2026-119466 Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site...

  • CVE-2026-37468

    🚨 CVE-2026-37468 Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via...

  • CVE-2026-39375

    🚨 CVE-2026-39375 Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.0...

  • CVE-2026-50000

    🚨 CVE-2026-50000 SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from...

  • CVE-2026-55551

    🚨 CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read...

  • CVE-2026-61789

    🚨 CVE-2026-61789 DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL...

  • CVE-2026-61803

    🚨 CVE-2026-61803 Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1...

Статистика статей

Статьи
53,101
Просмотры
287,632
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху