CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-55885

    🚨 CVE-2026-55885 Grav is a file-based Web platform. Prior to 1.7.53, an authenticated administrator with backup permissions can download a ZIP...

  • CVE-2026-55890

    🚨 CVE-2026-55890 Grav is a file-based Web platform. Prior to 2.0.0-rc.9, Grav's incomplete fix for stored XSS through the Markdown media attribute...

  • CVE-2026-56675

    🚨 CVE-2026-56675 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access...

  • CVE-2026-57167

    🚨 CVE-2026-57167 PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, server-side-rendered video watch pages embed a...

  • CVE-2026-58492

    🚨 CVE-2026-58492 grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, the PDO::tableExists method interpolates its table...

  • CVE-2026-58493

    🚨 CVE-2026-58493 grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by directly...

  • CVE-2026-59161

    🚨 CVE-2026-59161 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet...

  • CVE-2026-59162

    🚨 CVE-2026-59162 Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses...

  • CVE-2026-59180

    🚨 CVE-2026-59180 Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services...

  • CVE-2026-59190

    🚨 CVE-2026-59190 grav-plugin-admin is an HTML user interface that provides a way to configure Grav and create and modify pages. In 1.10.52 and...

  • CVE-2026-59193

    🚨 CVE-2026-59193 Grav is a file-based Web platform. Prior to 2.0.0, an authenticated admin.super user can crash Grav or fill the disk by uploading...

  • CVE-2026-2397

    🚨 CVE-2026-2397 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Adam Retail Automation Ltd...

  • CVE-2026-57474

    🚨 CVE-2026-57474 Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted...

  • CVE-2026-57475

    🚨 CVE-2026-57475 Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote...

  • CVE-2026-57476

    🚨 CVE-2026-57476 Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional...

  • CVE-2026-15146

    🚨 CVE-2026-15146 GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP...

  • CVE-2026-54329

    🚨 CVE-2026-54329 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass-assigns request...

  • CVE-2026-55460

    🚨 CVE-2026-55460 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated non-admin user with users.view and users.edit...

Статистика статей

Статьи
53,092
Просмотры
273,024
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху