CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-106142

    🚨 CVE-2026-106142 Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0...

  • CVE-2026-106144

    🚨 CVE-2026-106144 Prototype Pollution in the Scheduler component (@progress/kendo-angular-scheduler and @progress/kendo-angular-common) in...

  • CVE-2026-122193

    🚨 CVE-2026-122193 OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might...

  • CVE-2026-62855

    🚨 CVE-2026-62855 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrator-only App Logs viewer accepts...

  • CVE-2026-102356

    🚨 CVE-2026-102356 Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's...

  • CVE-2026-102359

    🚨 CVE-2026-102359 Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when...

  • CVE-2026-102650

    🚨 CVE-2026-102650 Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the...

  • CVE-2026-119758

    🚨 CVE-2026-119758 ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that allows...

  • CVE-2026-123748

    🚨 CVE-2026-123748 A security flaw has been discovered in chenyme grok2api up to 3.1.6. Affected by this vulnerability is the function...

  • CVE-2026-123824

    🚨 CVE-2026-123824 The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype, allowing...

  • CVE-2026-123876

    🚨 CVE-2026-123876 A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT...

  • CVE-2026-123973

    🚨 CVE-2026-123973 SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions...

  • CVE-2026-123976

    🚨 CVE-2026-123976 EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to overflow the...

  • CVE-2026-62344

    🚨 CVE-2026-62344 Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET...

  • CVE-2026-75598

    🚨 CVE-2026-75598 The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation. Prior to version...

  • CVE-2026-85742

    🚨 CVE-2026-85742 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, a pre-authenticated attacker can place HTML in a...

  • CVE-2026-89017

    🚨 CVE-2026-89017 Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to retrieve the...

  • CVE-2026-2340

    🚨 CVE-2026-2340 A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by...

Статистика статей

Статьи
53,084
Просмотры
229,863
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху