CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119038

    🚨 CVE-2026-119038 Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked...

  • CVE-2026-87768

    🚨 CVE-2026-87768 DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds...

  • CVE-2026-118986

    🚨 CVE-2026-118986 CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). The secret...

  • CVE-2026-118987

    🚨 CVE-2026-118987 CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cookieConf()...

  • CVE-2026-111487

    🚨 CVE-2026-111487 An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.

  • CVE-2026-119680

    🚨 CVE-2026-119680 A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper...

  • CVE-2026-119682

    🚨 CVE-2026-119682 An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine...

  • CVE-2026-104615

    🚨 CVE-2026-104615 A security vulnerability was discovered in SUSE Rancher Fleet's cluster registration flow, in Fleet versions before 0.12, 0.13.0...

  • CVE-2026-119289

    🚨 CVE-2026-119289 Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate...

  • CVE-2026-119716

    🚨 CVE-2026-119716 pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows...

  • CVE-2026-119720

    🚨 CVE-2026-119720 Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB...

  • CVE-2026-55551

    🚨 CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read...

  • CVE-2026-61789

    🚨 CVE-2026-61789 DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL...

  • CVE-2026-61804

    🚨 CVE-2026-61804 myTinyWMS is a free, open-source warehouse management system. Prior to version 1.6.4, `Product (Artikel)` and `Category`...

  • CVE-2026-119619

    🚨 CVE-2026-119619 A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the...

  • CVE-2026-119761

    🚨 CVE-2026-119761 Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows...

  • CVE-2026-119978

    🚨 CVE-2026-119978 Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing...

  • CVE-2026-73322

    🚨 CVE-2026-73322 Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled...

Статистика статей

Статьи
53,084
Просмотры
232,942
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху