CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120492

    🚨 CVE-2026-120492 Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped...

  • CVE-2026-120487

    🚨 CVE-2026-120487 LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades() that allows...

  • CVE-2026-104080

    🚨 CVE-2026-104080 Control Web Panel (CWP) before webpanel_version 1.29 contains an OS command injection vulnerability in the loopback API...

  • CVE-2026-119170

    🚨 CVE-2026-119170 There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS...

  • CVE-2026-77879

    🚨 CVE-2026-77879 Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication...

  • CVE-2026-119734

    🚨 CVE-2026-119734 Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authenticated...

  • CVE-2026-120416

    🚨 CVE-2026-120416 A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of...

  • CVE-2026-120501

    🚨 CVE-2026-120501 An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who...

  • CVE-2026-120740

    🚨 CVE-2026-120740 A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds...

  • CVE-2026-120752

    🚨 CVE-2026-120752 PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a...

  • CVE-2025-48158

    🚨 CVE-2026-120518 The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and...

  • CVE-2026-120551

    🚨 CVE-2026-120551 The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to authorization bypass in all...

  • CVE-2026-120563

    🚨 CVE-2026-120563 The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to SQL Injection in all versions up...

  • CVE-2026-105978

    🚨 CVE-2026-105978 Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating...

  • CVE-2026-109161

    🚨 CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of...

  • CVE-2026-76124

    🚨 CVE-2026-76124 The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the...

  • CVE-2026-106991

    🚨 CVE-2026-106991 hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sticky any...

  • CVE-2026-121386

    🚨 CVE-2026-121386 FreeRDP before 3.32.2 contains a denial of service vulnerability in WinPR's winpr_read_png_from_buffer() and...

Статистика статей

Статьи
53,082
Просмотры
225,660
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху