CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-62853

    🚨 CVE-2026-62853 ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied...

  • CVE-2026-62860

    🚨 CVE-2026-62860 Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/auth/login` endpoint reveals...

  • CVE-2026-62863

    🚨 CVE-2026-62863 MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse`...

  • CVE-2026-62966

    🚨 CVE-2026-62966 ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to version...

  • CVE-2026-55146

    🚨 CVE-2026-55146 LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and...

  • CVE-2026-55614

    🚨 CVE-2026-55614 uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases header names...

  • CVE-2026-63182

    🚨 CVE-2026-63182 LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and...

  • CVE-2026-63224

    🚨 CVE-2026-63224 OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV crosstab`...

  • CVE-2026-63338

    🚨 CVE-2026-63338 IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user...

  • CVE-2026-63344

    🚨 CVE-2026-63344 Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the content...

  • CVE-2026-63399

    🚨 CVE-2026-63399 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operation allows...

  • CVE-2026-63400

    🚨 CVE-2026-63400 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row...

  • CVE-2026-110251

    🚨 CVE-2026-110251 The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions...

  • CVE-2026-11396

    🚨 CVE-2026-11396 The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in...

  • CVE-2026-103997

    🚨 CVE-2026-103997 The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.15...

  • CVE-2026-120070

    🚨 CVE-2026-120070 The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post...

  • CVE-2026-116964

    🚨 CVE-2026-116964 A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the...

  • CVE-2026-120199

    🚨 CVE-2026-120199 LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to...

Статистика статей

Статьи
53,084
Просмотры
229,863
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху