CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-48117

    🚨 CVE-2026-48117 DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io was vulnerable to an account...

  • CVE-2026-49502

    🚨 CVE-2026-49502 Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated...

  • CVE-2026-54415

    🚨 CVE-2026-54415 Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms...

  • CVE-2026-54810

    🚨 CVE-2026-54810 Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-54812

    🚨 CVE-2026-54812 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors...

  • CVE-2026-11407

    🚨 CVE-2026-11407 Pimcore CMS/DXP version 12.3.8 contains a sandbox bypass vulnerability that allows authenticated administrative attackers to...

  • CVE-2026-12529

    🚨 CVE-2026-12529 A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0...

  • CVE-2026-32682

    🚨 CVE-2026-32682 When NGINX Gateway Fabric is configured using GRPCRoutes, an authenticated, remote attacker with permission to create or modify...

  • CVE-2026-50107

    🚨 CVE-2026-50107 When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists...

  • CVE-2026-55201

    🚨 CVE-2026-55201 Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that...

  • CVE-2026-48989

    🚨 CVE-2026-48989 Windows-MCP is an open-source project that integrates AI agents with Windows. In versions prior to 0.7.5, certain HTTP modes...

  • CVE-2026-48997

    🚨 CVE-2026-48997 e107 is a content management system (CMS). Versions 2.3.5 and earlier contain a command injection vulnerability in the...

  • CVE-2026-110447

    🚨 CVE-2026-110447 Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as...

  • CVE-2026-84823

    🚨 CVE-2026-84823 A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role...

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-115450

    🚨 CVE-2026-115450 External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template...

  • CVE-2026-115453

    🚨 CVE-2026-115453 Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce...

  • CVE-2026-105947

    🚨 CVE-2026-105947 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software...

Статистика статей

Статьи
53,102
Просмотры
292,174
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху