CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-64619

    🚨 CVE-2026-64619 FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers...

  • CVE-2026-15788

    🚨 CVE-2026-15788 BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions...

  • CVE-2026-44229

    🚨 CVE-2026-44229 RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to both 5.0.10...

  • CVE-2026-44230

    🚨 CVE-2026-44230 RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and...

  • CVE-2026-44231

    🚨 CVE-2026-44231 RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to...

  • CVE-2026-53591

    🚨 CVE-2026-53591 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthenticated...

  • CVE-2026-53592

    🚨 CVE-2026-53592 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in the...

  • CVE-2026-53593

    🚨 CVE-2026-53593 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that...

  • CVE-2026-63766

    🚨 CVE-2026-63766 GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5...

  • CVE-2026-63767

    🚨 CVE-2026-63767 ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that...

  • CVE-2026-13380

    🚨 CVE-2026-13380 VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated...

  • CVE-2026-47129

    🚨 CVE-2026-47129 NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Access Control...

  • CVE-2026-47130

    🚨 CVE-2026-47130 NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Object Level...

  • CVE-2026-53594

    🚨 CVE-2026-53594 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's `Manage -> Logs -> App Logs`...

  • CVE-2026-53595

    🚨 CVE-2026-53595 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint...

  • CVE-2026-53596

    🚨 CVE-2026-53596 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the FreeScout...

  • CVE-2026-56623

    🚨 CVE-2026-56623 Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and...

  • CVE-2026-56624

    🚨 CVE-2026-56624 Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and...

Статистика статей

Статьи
53,091
Просмотры
268,142
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху