CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118990

    🚨 CVE-2026-118990 CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a...

  • CVE-2026-118991

    🚨 CVE-2026-118991 CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getCrypt()...

  • CVE-2026-118992

    🚨 CVE-2026-118992 CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration...

  • CVE-2026-118993

    🚨 CVE-2026-118993 CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression...

  • CVE-2026-118994

    🚨 CVE-2026-118994 CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes the login name...

  • CVE-2026-118995

    🚨 CVE-2026-118995 CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator...

  • CVE-2026-118996

    🚨 CVE-2026-118996 CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig...

  • CVE-2026-119036

    🚨 CVE-2026-119036 Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking...

  • CVE-2026-119037

    🚨 CVE-2026-119037 Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty...

  • CVE-2026-119038

    🚨 CVE-2026-119038 Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked...

  • CVE-2026-13576

    🚨 CVE-2026-13576 CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with...

  • CVE-2026-118986

    🚨 CVE-2026-118986 CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). The secret...

  • CVE-2026-118987

    🚨 CVE-2026-118987 CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cookieConf()...

  • CVE-2026-119646

    🚨 CVE-2026-119646 Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites'...

  • CVE-2026-119650

    🚨 CVE-2026-119650 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows...

  • CVE-2026-119658

    🚨 CVE-2026-119658 PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to...

  • CVE-2026-119662

    🚨 CVE-2026-119662 Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to...

  • CVE-2026-44344

    🚨 CVE-2026-44344 Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple...

Статистика статей

Статьи
53,101
Просмотры
287,632
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху