CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56782

    🚨 CVE-2026-56782 Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows...

  • CVE-2026-56783

    🚨 CVE-2026-56783 Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns...

  • CVE-2026-57942

    🚨 CVE-2026-57942 LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address() function...

  • CVE-2026-57946

    🚨 CVE-2026-57946 Invidious before version 2.20260626.0 contains a broken access control vulnerability that allows unauthenticated attackers to...

  • CVE-2026-57947

    🚨 CVE-2026-57947 Pinpoint through 3.1.0 contains a server-side request forgery vulnerability in the webhook registration endpoint that allows...

  • CVE-2026-57948

    🚨 CVE-2026-57948 Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the...

  • CVE-2026-57949

    🚨 CVE-2026-57949 ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET...

  • CVE-2026-57950

    🚨 CVE-2026-57950 ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController...

  • CVE-2026-57951

    🚨 CVE-2026-57951 Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfied _or...

  • CVE-2026-57953

    🚨 CVE-2026-57953 Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to perform...

  • CVE-2026-57954

    🚨 CVE-2026-57954 Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules...

  • CVE-2026-57958

    🚨 CVE-2026-57958 Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute...

  • CVE-2026-57959

    🚨 CVE-2026-57959 Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before...

  • CVE-2026-57960

    🚨 CVE-2026-57960 Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated access to...

  • CVE-2026-53427

    🚨 CVE-2026-53427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leandrocp MDEx allows...

  • CVE-2026-57999

    🚨 CVE-2026-57999 luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows...

  • CVE-2026-58000

    🚨 CVE-2026-58000 luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus...

  • CVE-2026-13593

    🚨 CVE-2026-13593 CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minify...

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху