CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-48808

    🚨 CVE-2026-48808 Twig is a template language for PHP. Prior to 3.27.0, the column filter passes the active sandbox state as a boolean but does not...

  • CVE-2026-49981

    🚨 CVE-2026-49981 Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed...

  • CVE-2026-54684

    🚨 CVE-2026-54684 jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlled archive...

  • CVE-2026-15751

    🚨 CVE-2026-15751 A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is the...

  • CVE-2026-15752

    🚨 CVE-2026-15752 A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is an unknown...

  • CVE-2026-15753

    🚨 CVE-2026-15753 A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown...

  • CVE-2026-11851

    🚨 CVE-2026-11851 Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain...

  • CVE-2026-8919

    🚨 CVE-2026-8919 Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM...

  • CVE-2026-8920

    🚨 CVE-2026-8920 Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper...

  • CVE-2026-42936

    🚨 CVE-2026-42936 The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when...

  • CVE-2026-14251

    🚨 CVE-2026-14251 A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler does not validate resource ownership when...

  • CVE-2026-15583

    🚨 CVE-2026-15583 A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's...

  • CVE-2026-15804

    🚨 CVE-2026-15804 The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via...

  • CVE-2026-57831

    🚨 CVE-2026-57831 Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension...

  • CVE-2026-35152

    🚨 CVE-2026-35152 A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to and...

  • CVE-2026-49501

    🚨 CVE-2026-49501 Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege...

  • CVE-2026-56287

    🚨 CVE-2026-56287 A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in versions up to...

  • CVE-2026-57821

    🚨 CVE-2026-57821 A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including...

Статистика статей

Статьи
53,092
Просмотры
271,555
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху