CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2015-20130

    🚨 CVE-2015-20130 Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in...

  • CVE-2026-110799

    🚨 CVE-2026-110799 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version...

  • CVE-2026-111487

    🚨 CVE-2026-111487 An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

  • CVE-2026-112905

    🚨 CVE-2026-112905 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version...

  • CVE-2026-116860

    🚨 CVE-2026-116860 Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-117346

    🚨 CVE-2026-117346 Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

  • CVE-2026-117349

    🚨 CVE-2026-117349 Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

  • CVE-2026-119368

    🚨 CVE-2026-119368 Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting...

  • CVE-2026-119370

    🚨 CVE-2026-119370 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The...

  • CVE-2026-119482

    🚨 CVE-2026-119482 Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access...

  • CVE-2026-119644

    🚨 CVE-2026-119644 Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify...

  • CVE-2026-115708

    🚨 CVE-2026-115708 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to...

  • CVE-2026-115709

    🚨 CVE-2026-115709 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to...

  • CVE-2026-115711

    🚨 CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can...

  • CVE-2026-115712

    🚨 CVE-2026-115712 Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of platform-level...

  • CVE-2026-115713

    🚨 CVE-2026-115713 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to...

  • CVE-2026-116366

    🚨 CVE-2026-116366 An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with...

  • CVE-2010-20125

    🚨 CVE-2010-20125 DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers...

Статистика статей

Статьи
53,101
Просмотры
289,523
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху