CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-117184

    🚨 CVE-2026-117184 An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST...

  • CVE-2026-118238

    🚨 CVE-2026-118238 The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to...

  • CVE-2026-119287

    🚨 CVE-2026-119287 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts...

  • CVE-2026-119288

    🚨 CVE-2026-119288 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows...

  • CVE-2026-119289

    🚨 CVE-2026-119289 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate...

  • CVE-2026-119290

    🚨 CVE-2026-119290 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered...

  • CVE-2026-119291

    🚨 CVE-2026-119291 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold...

  • CVE-2026-119369

    🚨 CVE-2026-119369 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The...

  • CVE-2026-119479

    🚨 CVE-2026-119479 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder...

  • CVE-2026-119699

    🚨 CVE-2026-119699 WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated...

  • CVE-2026-119700

    🚨 CVE-2026-119700 WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine...

  • CVE-2026-119701

    🚨 CVE-2026-119701 WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers to flood password...

  • CVE-2026-119702

    🚨 CVE-2026-119702 WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unauthenticated...

  • CVE-2026-119703

    🚨 CVE-2026-119703 xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allows...

  • CVE-2026-119704

    🚨 CVE-2026-119704 Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed...

  • CVE-2026-119705

    🚨 CVE-2026-119705 SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated...

  • CVE-2026-119706

    🚨 CVE-2026-119706 InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote...

  • CVE-2026-119708

    🚨 CVE-2026-119708 abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name...

Статистика статей

Статьи
53,101
Просмотры
288,506
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху