CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123331

    🚨 CVE-2026-123331 In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

  • CVE-2026-123332

    🚨 CVE-2026-123332 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

  • CVE-2026-123333

    🚨 CVE-2026-123333 In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints

  • CVE-2026-123334

    🚨 CVE-2026-123334 In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

  • CVE-2026-123335

    🚨 CVE-2026-123335 In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any...

  • CVE-2026-112335

    🚨 CVE-2026-112335 Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that...

  • CVE-2026-112336

    🚨 CVE-2026-112336 Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote...

  • CVE-2026-87784

    🚨 CVE-2026-87784 The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the...

  • CVE-2026-92396

    🚨 CVE-2026-92396 The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 does not validate the user's capabilities...

  • CVE-2026-118166

    🚨 CVE-2026-118166 The MC4WP: Mailchimp for WordPress WordPress plugin before 4.15.0 does not prevent request-derived values in its dynamic content...

  • CVE-2026-118423

    🚨 CVE-2026-118423 The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing...

  • CVE-2026-121633

    🚨 CVE-2026-121633 The Order Tracking WordPress plugin before 3.6.0 does not verify that a PayPal payment notification was sent to the merchant's...

  • CVE-2026-121636

    🚨 CVE-2026-121636 The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before...

  • CVE-2026-88799

    🚨 CVE-2026-88799 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the...

  • CVE-2026-88800

    🚨 CVE-2026-88800 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role deletion request on every...

  • CVE-2026-88801

    🚨 CVE-2026-88801 The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check a capability or a nonce before...

  • CVE-2026-123329

    🚨 CVE-2026-123329 In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects'...

  • CVE-2026-123330

    🚨 CVE-2026-123330 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility...

Статистика статей

Статьи
53,082
Просмотры
228,155
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху