CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123619

    🚨 CVE-2026-123619 Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows...

  • CVE-2026-123624

    🚨 CVE-2026-123624 ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify...

  • CVE-2026-123785

    🚨 CVE-2026-123785 Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows attackers to...

  • CVE-2026-123677

    🚨 CVE-2026-123677 A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file...

  • CVE-2026-58141

    🚨 CVE-2026-58141 Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF...

  • CVE-2026-103984

    🚨 CVE-2026-103984 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, when limit_user_customer_visibility is enabled, the...

  • CVE-2026-103985

    🚨 CVE-2026-103985 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.231, the profile form exposes the only_assigned_tickets...

  • CVE-2026-104657

    🚨 CVE-2026-104657 Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which...

  • CVE-2026-106127

    🚨 CVE-2026-106127 Prototype Pollution in the setter utility (@progress/kendo-react-common) in Progress Software KendoReact versions 3.5.0 through...

  • CVE-2026-106128

    🚨 CVE-2026-106128 Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0 allows a...

  • CVE-2026-106134

    🚨 CVE-2026-106134 Cross-Site Scripting (XSS) in the Menu component (@progress/kendo-react-layout) in Progress Software KendoReact versions 1.3.0...

  • CVE-2026-106135

    🚨 CVE-2026-106135 Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo UI for...

  • CVE-2026-106136

    🚨 CVE-2026-106136 Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-react-conversational-ui) in Progress Software KendoReact...

  • CVE-2026-106141

    🚨 CVE-2026-106141 Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for Angular...

  • CVE-2026-106142

    🚨 CVE-2026-106142 Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-react-editor) in Progress Software KendoReact versions 2.7.0...

  • CVE-2026-106143

    🚨 CVE-2026-106143 Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-vue-editor) in Progress Software Kendo UI for Vue versions...

  • CVE-2026-106144

    🚨 CVE-2026-106144 Prototype Pollution in the Scheduler component (@progress/kendo-angular-scheduler and @progress/kendo-angular-common) in...

  • CVE-2026-118515

    🚨 CVE-2026-118515 The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File, so for a...

Статистика статей

Статьи
53,084
Просмотры
231,620
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху