CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56236

    🚨 CVE-2026-56236 Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow...

  • CVE-2026-56316

    🚨 CVE-2026-56316 Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint that...

  • CVE-2026-56381

    🚨 CVE-2026-56381 Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Permissions page where user...

  • CVE-2026-56382

    🚨 CVE-2026-56382 Craft CMS (composer package craftcms/cms) versions >= 5.5.0 and <= 5.9.13 contain a remote code execution vulnerability in the...

  • CVE-2026-56383

    🚨 CVE-2026-56383 Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the 'Row...

  • CVE-2026-56385

    🚨 CVE-2026-56385 Craft CMS versions >= 5.0.0-RC1, <= 5.9.13 and >= 4.0.0-RC1, <= 4.17.7 contain an authorization bypass in the assets/preview-file...

  • CVE-2026-56393

    🚨 CVE-2026-56393 Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) contain multiple stored cross-site scripting...

  • CVE-2026-56394

    🚨 CVE-2026-56394 Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the extension...

  • CVE-2026-56403

    🚨 CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in storeAtts.

  • CVE-2026-56404

    🚨 CVE-2026-56404 libexpat before 2.8.2 has an integer overflow in addBinding.

  • CVE-2026-56405

    🚨 CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.

  • CVE-2026-56406

    🚨 CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.

  • CVE-2026-56407

    🚨 CVE-2026-56407 libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.

  • CVE-2026-56408

    🚨 CVE-2026-56408 libexpat before 2.8.2 has an integer overflow in copyString.

  • CVE-2026-56409

    🚨 CVE-2026-56409 xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.

  • CVE-2026-56410

    🚨 CVE-2026-56410 xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.

  • CVE-2026-56411

    🚨 CVE-2026-56411 xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.

  • CVE-2026-56412

    🚨 CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for...

Статистика статей

Статьи
53,098
Просмотры
285,102
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху