CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-42853

    🚨 CVE-2026-42853 ApostropheCMS is an open-source Node.js content management system. Versions of the @apostrophecms/cli package up to and including...

  • CVE-2026-44990

    🚨 CVE-2026-44990 ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a...

  • CVE-2026-45011

    🚨 CVE-2026-45011 ApostropheCMS is an open-source Node.js content management system. Version 4.29.0 has a stored cross-site scripting vulnerability...

  • CVE-2026-45012

    🚨 CVE-2026-45012 ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 contain an authenticated...

  • CVE-2026-50255

    🚨 CVE-2026-50255 Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability...

  • CVE-2026-8443

    🚨 CVE-2026-8443 The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the...

  • CVE-2026-10825

    🚨 CVE-2026-10825 A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests...

  • CVE-2026-39437

    🚨 CVE-2026-39437 Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

  • CVE-2026-39490

    🚨 CVE-2026-39490 Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions.

  • CVE-2026-39574

    🚨 CVE-2026-39574 Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.

  • CVE-2026-39581

    🚨 CVE-2026-39581 Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.

  • CVE-2026-40809

    🚨 CVE-2026-40809 Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-49774

    🚨 CVE-2026-49774 Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion...

  • CVE-2026-52711

    🚨 CVE-2026-52711 Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.

  • CVE-2026-52712

    🚨 CVE-2026-52712 Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.

  • CVE-2026-54190

    🚨 CVE-2026-54190 Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.

  • CVE-2026-54197

    🚨 CVE-2026-54197 Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.

  • CVE-2026-8442

    🚨 CVE-2026-8442 The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8...

Статистика статей

Статьи
53,101
Просмотры
289,523
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху