CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-68391

    🚨 CVE-2025-68394 ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input...

  • CVE-2025-68391

    🚨 CVE-2025-68395 ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker...

  • CVE-2026-119379

    🚨 CVE-2026-119379 SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply()...

  • CVE-2026-119414

    🚨 CVE-2026-119414 Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows...

  • CVE-2026-119418

    🚨 CVE-2026-119418 CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame...

  • CVE-2026-119422

    🚨 CVE-2026-119422 Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-119426

    🚨 CVE-2026-119426 phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrary...

  • CVE-2026-119545

    🚨 CVE-2026-119545 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnerability...

  • CVE-2026-119549

    🚨 CVE-2026-119549 Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass...

  • CVE-2026-119553

    🚨 CVE-2026-119553 Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversal...

  • CVE-2026-119557

    🚨 CVE-2026-119557 n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated...

  • CVE-2026-119561

    🚨 CVE-2026-119561 phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse()...

  • CVE-2026-119565

    🚨 CVE-2026-119565 Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows...

  • CVE-2026-115865

    🚨 CVE-2026-115865 Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory...

  • CVE-2026-115866

    🚨 CVE-2026-115866 Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked...

  • CVE-2026-116127

    🚨 CVE-2026-116127 Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or...

  • CVE-2026-116128

    🚨 CVE-2026-116128 Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request...

  • CVE-2026-118988

    🚨 CVE-2026-118988 CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc...

Статистика статей

Статьи
53,101
Просмотры
287,632
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху