CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-48954

    🚨 CVE-2026-48954 Improper validation leads to a generic XSS vector in the language override feature.

  • CVE-2026-48955

    🚨 CVE-2026-48955 An improper access check allows unauthorized users to access workflow stage and transition information.

  • CVE-2026-48956

    🚨 CVE-2026-48956 An improper access check allows users to display a list of modules in the frontend.

  • CVE-2026-48957

    🚨 CVE-2026-48957 An improper access check allows unauthorized users to access com_privacy datasets.

  • CVE-2026-48958

    🚨 CVE-2026-48958 An improper access check allows unauthorized users to create custom fields via webservices endpoints.

  • CVE-2026-59708

    🚨 CVE-2026-59708 The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs without validating granteeUserId...

  • CVE-2026-59800

    🚨 CVE-2026-59800 9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install...

  • CVE-2026-7017

    🚨 CVE-2026-7017 HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a...

  • CVE-2026-46672

    🚨 CVE-2026-46672 Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in...

  • CVE-2026-46700

    🚨 CVE-2026-46700 Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server checks...

  • CVE-2026-49471

    🚨 CVE-2026-49471 Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. Prior to v1.5.2, Serena's...

  • CVE-2026-50007

    🚨 CVE-2026-50007 Actual is an open-source personal finance application. Prior to 26.7.0, a missing authorization issue allows a shared user with...

  • CVE-2026-53511

    🚨 CVE-2026-53511 calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its...

  • CVE-2026-55592

    🚨 CVE-2026-55592 Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it...

  • CVE-2026-58469

    🚨 CVE-2026-58469 GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string()...

  • CVE-2026-58470

    🚨 CVE-2026-58470 GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range()...

  • CVE-2026-58471

    🚨 CVE-2026-58471 GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function...

  • CVE-2026-58472

    🚨 CVE-2026-58472 GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string()...

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху