CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110970

    🚨 CVE-2026-110972 Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server...

  • CVE-2026-111504

    🚨 CVE-2026-111504 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command...

  • CVE-2026-111505

    🚨 CVE-2026-111505 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS...

  • CVE-2026-119364

    🚨 CVE-2026-119364 ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy that allows...

  • CVE-2026-119371

    🚨 CVE-2026-119371 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH...

  • CVE-2026-119374

    🚨 CVE-2026-119374 SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past...

  • CVE-2026-119375

    🚨 CVE-2026-119375 SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache...

  • CVE-2026-119378

    🚨 CVE-2026-119378 SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications...

  • CVE-2026-119409

    🚨 CVE-2026-119409 OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware...

  • CVE-2026-119421

    🚨 CVE-2026-119421 Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that allows...

  • CVE-2026-119425

    🚨 CVE-2026-119425 OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming feature that...

  • CVE-2026-119429

    🚨 CVE-2026-119429 phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove...

  • CVE-2026-119548

    🚨 CVE-2026-119548 Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows users of one...

  • CVE-2026-119552

    🚨 CVE-2026-119552 Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticated...

  • CVE-2026-119556

    🚨 CVE-2026-119556 Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing...

  • CVE-2026-119560

    🚨 CVE-2026-119560 OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append...

  • CVE-2026-119564

    🚨 CVE-2026-119564 Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to...

  • CVE-2026-119568

    🚨 CVE-2026-119568 vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers...

Статистика статей

Статьи
53,101
Просмотры
288,506
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху