CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-19131

    🚨 CVE-2026-19131 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due...

  • CVE-2026-75590

    🚨 CVE-2026-75590 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources and obtain sensitive...

  • CVE-2026-93779

    🚨 CVE-2026-93779 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in...

  • CVE-2026-93902

    🚨 CVE-2026-93902 The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Profile Fields in all versions up to, and...

  • CVE-2026-9601

    🚨 CVE-2026-9601 The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2025-15708

    🚨 CVE-2025-15708 The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug settings before...

  • CVE-2026-117525

    🚨 CVE-2026-117525 The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values embedded in...

  • CVE-2026-117588

    🚨 CVE-2026-117588 The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google...

  • CVE-2026-118528

    🚨 CVE-2026-118528 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not validate that...

  • CVE-2026-118529

    🚨 CVE-2026-118529 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that a...

  • CVE-2026-118530

    🚨 CVE-2026-118530 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not check that the...

  • CVE-2026-118532

    🚨 CVE-2026-118532 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify ownership...

  • CVE-2026-118533

    🚨 CVE-2026-118533 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the...

  • CVE-2026-118534

    🚨 CVE-2026-118534 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that the...

  • CVE-2026-119073

    🚨 CVE-2026-119073 The Live Composer WordPress plugin before 2.1.23 does not escape a pagination setting supplied through its post-listing module...

  • CVE-2026-121379

    🚨 CVE-2026-121379 The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team...

  • CVE-2026-121380

    🚨 CVE-2026-121380 The Tournamatch WordPress plugin before 4.7.1 does not restrict access to its team invitation listing, allowing unauthenticated...

  • CVE-2026-121491

    🚨 CVE-2026-121491 The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it into a PHP file it...

Статистика статей

Статьи
53,082
Просмотры
222,786
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху