CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-22328

    🚨 CVE-2026-22328 Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.

  • CVE-2026-22343

    🚨 CVE-2026-22343 Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions.

  • CVE-2026-25439

    🚨 CVE-2026-25439 Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions.

  • CVE-2026-27041

    🚨 CVE-2026-27041 Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.

  • CVE-2026-32966

    🚨 CVE-2026-32966 DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This...

  • CVE-2026-44587

    🚨 CVE-2026-44587 CarrierWave is a framework to upload files from Ruby applications. In versions prior to 2.2.7 and 3.1.3, the...

  • CVE-2026-48745

    🚨 CVE-2026-48745 Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar...

  • CVE-2026-48788

    🚨 CVE-2026-48788 Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0...

  • CVE-2026-10641

    🚨 CVE-2026-10641 Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetooth/host/classic/hfp_hf.c) contains an...

  • CVE-2026-40738

    🚨 CVE-2026-40738 Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.

  • CVE-2026-54818

    🚨 CVE-2026-54818 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat...

  • CVE-2026-54819

    🚨 CVE-2026-54819 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webilia Inc. Listdom allows...

  • CVE-2026-11311

    🚨 CVE-2026-11311 When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX...

  • CVE-2026-48591

    🚨 CVE-2026-48591 Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site...

  • CVE-2026-53871

    🚨 CVE-2026-53871 Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts...

  • CVE-2026-48814

    🚨 CVE-2026-48814 Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP SSE server allows...

  • CVE-2026-48817

    🚨 CVE-2026-48817 Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects...

  • CVE-2026-44645

    🚨 CVE-2026-44645 LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the...

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху