CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121442

    🚨 CVE-2026-121442 Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allows authenticated employees to view other...

  • CVE-2026-121446

    🚨 CVE-2026-121446 svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL...

  • CVE-2026-121450

    🚨 CVE-2026-121450 CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the...

  • CVE-2026-121454

    🚨 CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated...

  • CVE-2026-121545

    🚨 CVE-2026-121545 Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEvent that allows...

  • CVE-2026-121549

    🚨 CVE-2026-121549 nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to...

  • CVE-2026-121553

    🚨 CVE-2026-121553 Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowing attackers to...

  • CVE-2026-121557

    🚨 CVE-2026-121557 WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send...

  • CVE-2026-121561

    🚨 CVE-2026-121561 Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that allows...

  • CVE-2026-114183

    🚨 CVE-2026-114183 Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve...

  • CVE-2026-120846

    🚨 CVE-2026-120846 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured...

  • CVE-2026-121259

    🚨 CVE-2026-121259 A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or...

  • CVE-2026-121261

    🚨 CVE-2026-121261 A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::loadFromFile of the...

  • CVE-2026-121587

    🚨 CVE-2026-121587 Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate...

  • CVE-2026-121604

    🚨 CVE-2026-121604 wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that allows local...

  • CVE-2026-121626

    🚨 CVE-2026-121626 GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket() that...

  • CVE-2026-39777

    🚨 CVE-2026-39777 Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly...

  • CVE-2026-93754

    🚨 CVE-2026-93754 The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in...

Статистика статей

Статьи
53,082
Просмотры
224,175
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху