CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115557

    🚨 CVE-2026-115557 Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without...

  • CVE-2026-115999

    🚨 CVE-2026-115999 A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function...

  • CVE-2026-116004

    🚨 CVE-2026-116004 A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file...

  • CVE-2026-116000

    🚨 CVE-2026-116000 A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri...

  • CVE-2026-114820

    🚨 CVE-2026-114820 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...

  • CVE-2026-116006

    🚨 CVE-2026-116006 A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of...

  • CVE-2026-116007

    🚨 CVE-2026-116007 A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function...

  • CVE-2025-15705

    🚨 CVE-2025-15705 The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users with access...

  • CVE-2026-110285

    🚨 CVE-2026-110285 The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing secret is...

  • CVE-2026-111976

    🚨 CVE-2026-111976 The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation form on a...

  • CVE-2026-111978

    🚨 CVE-2026-111978 The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk...

  • CVE-2026-111980

    🚨 CVE-2026-111980 The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to...

  • CVE-2026-111981

    🚨 CVE-2026-111981 The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, allowing...

  • CVE-2026-114740

    🚨 CVE-2026-114740 The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setup wizard...

  • CVE-2026-114741

    🚨 CVE-2026-114741 The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual...

  • CVE-2026-114742

    🚨 CVE-2026-114742 The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing...

  • CVE-2026-111979

    🚨 CVE-2026-111979 The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings...

  • CVE-2026-114743

    🚨 CVE-2026-114743 The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPress plugin...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху