CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-77442

    🚨 CVE-2026-77442 Ryot is a self-hosted personal tracking application. Prior to 10.4.0, the createOrUpdateUserIntegration GraphQL mutation in...

  • CVE-2026-94618

    🚨 CVE-2026-94618 FileGator is a multi-user file manager. Prior to 7.15.0, GET /batchdownload in backend/Controllers/DownloadController.php uses...

  • CVE-2026-94619

    🚨 CVE-2026-94619 FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controllers/UploadController.php uses the...

  • CVE-2026-109469

    🚨 CVE-2026-109469 Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate...

  • CVE-2026-119519

    🚨 CVE-2026-119519 Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly...

  • CVE-2026-118785

    🚨 CVE-2026-118785 Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples...

  • CVE-2026-12080

    🚨 CVE-2026-12080 A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the...

  • CVE-2026-120845

    🚨 CVE-2026-120845 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Smush Image...

  • CVE-2026-120851

    🚨 CVE-2026-120851 Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary allows Exploiting Incorrectly Configured...

  • CVE-2026-122670

    🚨 CVE-2026-122670 Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-123471

    🚨 CVE-2026-123471 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred mycred allows Code...

  • CVE-2026-27356

    🚨 CVE-2026-27356 Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-118786

    🚨 CVE-2026-118786 Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example...

  • CVE-2024-6505

    🚨 CVE-2024-6505 A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the...

  • CVE-2026-71226

    🚨 CVE-2026-71226 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted...

  • CVE-2026-75939

    🚨 CVE-2026-75939 A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by...

  • CVE-2026-71881

    🚨 CVE-2026-71881 Multiple injection issues in resource metadata fields in GBIF Integrated Publishing Toolkit versions before 3.3.5 allows...

  • CVE-2026-120458

    🚨 CVE-2026-120458 Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang...

Статистика статей

Статьи
53,082
Просмотры
225,660
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху