CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-116189

    🚨 CVE-2026-116189 rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from...

  • CVE-2026-116190

    🚨 CVE-2026-116190 rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards...

  • CVE-2026-116191

    🚨 CVE-2026-116191 Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write...

  • CVE-2026-116192

    🚨 CVE-2026-116192 rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to...

  • CVE-2026-116193

    🚨 CVE-2026-116193 Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated...

  • CVE-2026-116194

    🚨 CVE-2026-116194 Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth...

  • CVE-2026-116195

    🚨 CVE-2026-116195 Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the...

  • CVE-2026-116196

    🚨 CVE-2026-116196 Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authorization...

  • CVE-2026-116197

    🚨 CVE-2026-116197 Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can...

  • CVE-2026-116198

    🚨 CVE-2026-116198 Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into...

  • CVE-2026-116199

    🚨 CVE-2026-116199 Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user...

  • CVE-2026-116201

    🚨 CVE-2026-116201 Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by...

  • CVE-2026-116202

    🚨 CVE-2026-116202 YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users to...

  • CVE-2026-116203

    🚨 CVE-2026-116203 YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes...

  • CVE-2026-116204

    🚨 CVE-2026-116204 YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action...

  • CVE-2026-116205

    🚨 CVE-2026-116205 YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch...

  • CVE-2026-116206

    🚨 CVE-2026-116206 YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject...

  • CVE-2026-116207

    🚨 CVE-2026-116207 YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in...

Статистика статей

Статьи
53,092
Просмотры
271,555
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху