CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56241

    🚨 CVE-2026-56241 Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access to...

  • CVE-2026-56252

    🚨 CVE-2026-56252 Capgo before 12.128.2 contains a scope isolation vulnerability in the POST /webhooks/test endpoint that allows app-scoped API...

  • CVE-2026-56271

    🚨 CVE-2026-56271 Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token'...

  • CVE-2026-56308

    🚨 CVE-2026-56308 Capgo before 12.128.2 allows email address changes without requiring current password re-authentication or verification of the...

  • CVE-2026-56313

    🚨 CVE-2026-56313 Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint that allows...

  • CVE-2026-56349

    🚨 CVE-2026-56349 n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass...

  • CVE-2026-56375

    🚨 CVE-2026-56375 ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger...

  • CVE-2026-116168

    🚨 CVE-2026-116168 SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an...

  • CVE-2026-116169

    🚨 CVE-2026-116169 SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permission to...

  • CVE-2026-116170

    🚨 CVE-2026-116170 SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting...

  • CVE-2026-116171

    🚨 CVE-2026-116171 SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows...

  • CVE-2026-116054

    🚨 CVE-2026-116054 A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de...

  • CVE-2026-116055

    🚨 CVE-2026-116055 A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file...

  • CVE-2026-58520

    🚨 CVE-2026-58520 URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension...

  • CVE-2026-15495

    🚨 CVE-2026-15495 A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file...

  • CVE-2026-15496

    🚨 CVE-2026-15496 A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file...

  • CVE-2026-15497

    🚨 CVE-2026-15497 A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file...

  • CVE-2026-56238

    🚨 CVE-2026-56238 Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that...

Статистика статей

Статьи
53,092
Просмотры
273,852
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху