CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-61451

    🚨 CVE-2026-61451 The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in...

  • CVE-2026-61452

    🚨 CVE-2026-61452 The Grav API plugin (getgrav/grav-plugin-api) before 2.0.4 contains an improper session invalidation vulnerability where JWT...

  • CVE-2026-61457

    🚨 CVE-2026-61457 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controller...

  • CVE-2026-61873

    🚨 CVE-2026-61873 Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is...

  • CVE-2026-46458

    🚨 CVE-2026-46458 ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static...

  • CVE-2026-46458

    🚨 CVE-2026-46459 ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an...

  • CVE-2026-58550

    🚨 CVE-2026-58550 Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect...

  • CVE-2026-58551

    🚨 CVE-2026-58551 Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect...

  • CVE-2026-58552

    🚨 CVE-2026-58552 Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect...

  • CVE-2026-58553

    🚨 CVE-2026-58553 Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect...

  • CVE-2026-58555

    🚨 CVE-2026-58555 Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

  • CVE-2026-58557

    🚨 CVE-2026-58557 Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.

  • CVE-2026-43637

    🚨 CVE-2026-43637 Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the...

  • CVE-2026-59838

    🚨 CVE-2026-59838 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0...

  • CVE-2026-33213

    🚨 CVE-2026-33213 Redash is a package for data visualization and sharing. From 5.0.2 to 26.3.0, the get_next_path() function in Redash's...

  • CVE-2026-52865

    🚨 CVE-2026-52865 When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission...

  • CVE-2026-55723

    🚨 CVE-2026-55723 When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an injection...

  • CVE-2026-60065

    🚨 CVE-2026-60065 When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху