CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56283

    🚨 CVE-2026-56283 Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to...

  • CVE-2026-56284

    🚨 CVE-2026-56284 Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function...

  • CVE-2026-56297

    🚨 CVE-2026-56297 FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to improper...

  • CVE-2026-56298

    🚨 CVE-2026-56298 Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive...

  • CVE-2026-56360

    🚨 CVE-2026-56360 n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node...

  • CVE-2026-56374

    🚨 CVE-2026-56374 ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when...

  • CVE-2026-56778

    🚨 CVE-2026-56778 n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which...

  • CVE-2026-58480

    🚨 CVE-2026-58480 Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that...

  • CVE-2026-58656

    🚨 CVE-2026-58656 Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with...

  • CVE-2026-59257

    🚨 CVE-2026-59257 n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1...

  • CVE-2026-10698

    🚨 CVE-2026-10698 Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports...

  • CVE-2026-10699

    🚨 CVE-2026-10699 Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This...

  • CVE-2026-10706

    🚨 CVE-2026-10706 In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavior across...

  • CVE-2026-10708

    🚨 CVE-2026-10708 This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a minimal...

  • CVE-2026-11903

    🚨 CVE-2026-11903 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer...

  • CVE-2026-15044

    🚨 CVE-2026-15044 A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security...

  • CVE-2026-15067

    🚨 CVE-2026-15067 Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an...

  • CVE-2026-49145

    🚨 CVE-2026-49145 App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the...

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху