CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56335

    🚨 CVE-2026-56335 Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate protected...

  • CVE-2026-56366

    🚨 CVE-2026-56366 ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths...

  • CVE-2026-56373

    🚨 CVE-2026-56373 ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory...

  • CVE-2026-61437

    🚨 CVE-2026-61437 PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in...

  • CVE-2026-61441

    🚨 CVE-2026-61441 PraisonAI Platform (praisonai-platform) before 0.1.9 improperly authorizes deletion of issue dependencies. The DELETE dependency...

  • CVE-2026-61444

    🚨 CVE-2026-61444 PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is...

  • CVE-2026-61450

    🚨 CVE-2026-61450 Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author (any admin.pages user, or anyone able to write to...

  • CVE-2026-61455

    🚨 CVE-2026-61455 Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::extract() that lacks limits on uncompressed size...

  • CVE-2026-61456

    🚨 CVE-2026-61456 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 fails to sanitize SVG files uploaded through the POST /api/v1/media...

  • CVE-2026-61492

    🚨 CVE-2026-61492 In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible

  • CVE-2026-15143

    🚨 CVE-2026-15143 A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply...

  • CVE-2026-15373

    🚨 CVE-2026-15373 A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file...

  • CVE-2026-15374

    🚨 CVE-2026-15374 A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file...

  • CVE-2026-15375

    🚨 CVE-2026-15375 A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file...

  • CVE-2026-33382

    🚨 CVE-2026-33382 Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An...

  • CVE-2026-55500

    🚨 CVE-2026-55500 9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export...

  • CVE-2026-55501

    🚨 CVE-2026-55501 9Router is an AI router & token saver. Prior to 0.4.80, the dashboard login rate limiter in src/lib/auth/loginLimiter.js derives...

  • CVE-2026-56676

    🚨 CVE-2026-56676 9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but...

Статистика статей

Статьи
53,092
Просмотры
273,024
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху