CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-57325

    🚨 CVE-2026-57325 Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.

  • CVE-2026-57430

    🚨 CVE-2026-57430 Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions.

  • CVE-2026-57431

    🚨 CVE-2026-57431 Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.

  • CVE-2026-57527

    🚨 CVE-2026-57527 Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers...

  • CVE-2026-57622

    🚨 CVE-2026-57622 Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.

  • CVE-2026-102870

    🚨 CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a...

  • CVE-2026-70197

    🚨 CVE-2026-70197 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  • CVE-2026-116061

    🚨 CVE-2026-116061 A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of...

  • CVE-2026-116062

    🚨 CVE-2026-116062 A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown...

  • CVE-2026-116063

    🚨 CVE-2026-116063 A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file...

  • CVE-2026-54824

    🚨 CVE-2026-54824 Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions.

  • CVE-2026-54826

    🚨 CVE-2026-54826 Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions.

  • CVE-2026-58226

    🚨 CVE-2026-58226 Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK...

  • CVE-2026-6900

    🚨 CVE-2026-6900 Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.

  • CVE-2026-6901

    🚨 CVE-2026-6901 Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.

  • CVE-2026-13705

    🚨 CVE-2026-13705 Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE...

  • CVE-2026-13708

    🚨 CVE-2026-13708 Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in...

  • CVE-2026-58203

    🚨 CVE-2026-58203 pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret...

Статистика статей

Статьи
53,092
Просмотры
276,402
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху