CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-54219

    🚨 CVE-2026-54223 UBB.threads is vulnerable to Path traversal, allowing attackers with privilege to edit templates to read and write any file on...

  • CVE-2026-54219

    🚨 CVE-2026-54224 UBB.threads is vulnerable to Denial of Service (DoS). By sending multiple concurrent requests to view any user profile on...

  • CVE-2026-54419

    🚨 CVE-2026-54419 claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit...

  • CVE-2026-56007

    🚨 CVE-2026-56007 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP Ocean Product...

  • CVE-2026-56009

    🚨 CVE-2026-56009 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricksable for Bricks...

  • CVE-2026-56012

    🚨 CVE-2026-56012 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary...

  • CVE-2026-9158

    🚨 CVE-2026-9158 In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead...

  • CVE-2026-22551

    🚨 CVE-2026-22551 In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests...

  • CVE-2026-44688

    🚨 CVE-2026-44688 In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt...

  • CVE-2026-44691

    🚨 CVE-2026-44691 In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g. .theia/tasks.json...

  • CVE-2026-46580

    🚨 CVE-2026-46580 In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically...

  • CVE-2026-11982

    🚨 CVE-2026-11982 Grav 2.0.0-rc.9 with Admin2 2.0.0-rc.14 contains a stored cross-site scripting (XSS) vulnerability in the Admin2 Pages API save flow.

  • CVE-2026-48617

    🚨 CVE-2026-48617 A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead...

  • CVE-2026-55204

    🚨 CVE-2026-55204 HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within...

  • CVE-2026-12527

    🚨 CVE-2026-12527 A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP...

  • CVE-2026-12539

    🚨 CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to...

  • CVE-2026-44942

    🚨 CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or...

  • CVE-2026-54219

    🚨 CVE-2026-54222 UBB.threads is vulnerable to Blind SQL Injection, allowing attackers with access to the Members in Control Panel to interact with...

Статистика статей

Статьи
53,101
Просмотры
290,437
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху