CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119645

    🚨 CVE-2026-119645 ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated users to...

  • CVE-2026-119646

    🚨 CVE-2026-119646 Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites'...

  • CVE-2026-119648

    🚨 CVE-2026-119648 Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to...

  • CVE-2026-119649

    🚨 CVE-2026-119649 Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in...

  • CVE-2026-119650

    🚨 CVE-2026-119650 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows...

  • CVE-2026-119651

    🚨 CVE-2026-119651 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows...

  • CVE-2026-119652

    🚨 CVE-2026-119652 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allows...

  • CVE-2026-119653

    🚨 CVE-2026-119653 Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host...

  • CVE-2026-119654

    🚨 CVE-2026-119654 DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate...

  • CVE-2026-119655

    🚨 CVE-2026-119655 CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint via the...

  • CVE-2026-119656

    🚨 CVE-2026-119656 CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPageList...

  • CVE-2026-119657

    🚨 CVE-2026-119657 FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated users to...

  • CVE-2026-119658

    🚨 CVE-2026-119658 PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to...

  • CVE-2026-119659

    🚨 CVE-2026-119659 Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users'...

  • CVE-2026-119660

    🚨 CVE-2026-119660 MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin...

  • CVE-2026-119661

    🚨 CVE-2026-119661 ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks...

  • CVE-2026-119662

    🚨 CVE-2026-119662 Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to...

  • CVE-2026-119663

    🚨 CVE-2026-119663 Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API...

Статистика статей

Статьи
53,101
Просмотры
289,523
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху