CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58077

    🚨 CVE-2026-58077 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable...

  • CVE-2026-40633

    🚨 CVE-2026-40633 Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive...

  • CVE-2026-59235

    🚨 CVE-2026-59235 Missing Authorization (CWE-862) in BankAccountListController...

  • CVE-2026-56353

    🚨 CVE-2026-56353 n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration)...

  • CVE-2026-56764

    🚨 CVE-2026-56764 Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time...

  • CVE-2026-58655

    🚨 CVE-2026-58655 The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template...

  • CVE-2026-115981

    🚨 CVE-2026-115981 A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of...

  • CVE-2026-115982

    🚨 CVE-2026-115982 A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file...

  • CVE-2026-41876

    🚨 CVE-2026-41879 R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to...

  • CVE-2026-41876

    🚨 CVE-2026-41880 R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution...

  • CVE-2026-14461

    🚨 CVE-2026-14461 mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response...

  • CVE-2026-58225

    🚨 CVE-2026-58225 SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into...

  • CVE-2026-54468

    🚨 CVE-2026-54468 Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker...

  • CVE-2026-56688

    🚨 CVE-2026-56688 Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command...

  • CVE-2026-56689

    🚨 CVE-2026-56689 Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL...

  • CVE-2026-56690

    🚨 CVE-2026-56690 Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL...

  • CVE-2026-56814

    🚨 CVE-2026-56814 Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its...

  • CVE-2026-54469

    🚨 CVE-2026-54469 Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху