CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56013

    🚨 CVE-2026-56013 Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.

  • CVE-2026-56014

    🚨 CVE-2026-56014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider...

  • CVE-2026-56023

    🚨 CVE-2026-56023 Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions.

  • CVE-2026-56042

    🚨 CVE-2026-56042 Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.

  • CVE-2026-56050

    🚨 CVE-2026-56050 Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control...

  • CVE-2026-56053

    🚨 CVE-2026-56053 Subscriber PHP Object Injection in EventPrime <= 4.3.4.1 versions.

  • CVE-2026-56054

    🚨 CVE-2026-56054 Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.

  • CVE-2026-56122

    🚨 CVE-2026-56122 Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read...

  • CVE-2026-57429

    🚨 CVE-2026-57429 Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.

  • CVE-2026-57619

    🚨 CVE-2026-57619 Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.

  • CVE-2026-13222

    🚨 CVE-2026-13222 Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could...

  • CVE-2026-13223

    🚨 CVE-2026-13223 Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker...

  • CVE-2026-13314

    🚨 CVE-2026-13314 Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.

  • CVE-2026-46735

    🚨 CVE-2026-46735 Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements...

  • CVE-2026-49319

    🚨 CVE-2026-49319 Remote Keyless Entry System (RKES), using the 433 MHz key fob bearing FCC ID CWTR53R0 manufactured by ALPS ALPINE CO., LTD., is...

  • CVE-2026-57234

    🚨 CVE-2026-57234 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which...

  • CVE-2026-57235

    🚨 CVE-2026-57235 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[]...

  • CVE-2026-57236

    🚨 CVE-2026-57236 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding=...

Статистика статей

Статьи
53,101
Просмотры
286,096
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху