CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-22093

    🚨 CVE-2026-22093 The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the...

  • CVE-2026-22095

    🚨 CVE-2026-22095 The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection.

  • CVE-2026-22096

    🚨 CVE-2026-22096 The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as...

  • CVE-2026-22097

    🚨 CVE-2026-22097 The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware...

  • CVE-2026-22098

    🚨 CVE-2026-22098 Various sensitive information such as passwords and charging card UIDs are written to log files.

  • CVE-2026-22099

    🚨 CVE-2026-22099 The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed...

  • CVE-2026-22100

    🚨 CVE-2026-22100 The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS...

  • CVE-2026-22102

    🚨 CVE-2026-22102 A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the...

  • CVE-2026-22103

    🚨 CVE-2026-22103 The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.

  • CVE-2026-41041

    🚨 CVE-2026-41041 URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache...

  • CVE-2026-49876

    🚨 CVE-2026-49876 Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via...

  • CVE-2026-57363

    🚨 CVE-2026-57363 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot...

  • CVE-2026-57364

    🚨 CVE-2026-57364 Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations...

  • CVE-2026-57365

    🚨 CVE-2026-57365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA...

  • CVE-2026-57368

    🚨 CVE-2026-57368 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster...

  • CVE-2026-57369

    🚨 CVE-2026-57369 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder...

  • CVE-2026-57371

    🚨 CVE-2026-57371 Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects...

  • CVE-2026-57375

    🚨 CVE-2026-57375 Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control...

Статистика статей

Статьи
53,092
Просмотры
269,975
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху