CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-48588

    🚨 CVE-2026-48588 An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()`...

  • CVE-2026-53877

    🚨 CVE-2026-53877 An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its...

  • CVE-2026-53878

    🚨 CVE-2026-53878 An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in...

  • CVE-2026-59709

    🚨 CVE-2026-59709 Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field when...

  • CVE-2026-56811

    🚨 CVE-2026-56811 Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoenix.Socket module) allows an...

  • CVE-2026-56812

    🚨 CVE-2026-56812 Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Presence JavaScript client)...

  • CVE-2026-13020

    🚨 CVE-2026-13020 A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows...

  • CVE-2026-14904

    🚨 CVE-2026-14904 AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage...

  • CVE-2026-23697

    🚨 CVE-2026-23697 Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote...

  • CVE-2026-23698

    🚨 CVE-2026-23698 Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that...

  • CVE-2026-57851

    🚨 CVE-2026-57851 MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any...

  • CVE-2026-48947

    🚨 CVE-2026-48947 An improper access check allows privileged users to overwrite media files without editing permissions.

  • CVE-2026-48948

    🚨 CVE-2026-48948 An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.

  • CVE-2026-48949

    🚨 CVE-2026-48949 Lack of validation leads to an XSS vulnerability in the MFA management views.

  • CVE-2026-48950

    🚨 CVE-2026-48950 Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.

  • CVE-2026-48951

    🚨 CVE-2026-48951 Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.

  • CVE-2026-48952

    🚨 CVE-2026-48952 Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

  • CVE-2026-48953

    🚨 CVE-2026-48953 Lack of escaping leads to an XSS vulnerability in the generic image output layout.

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху