CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-8481

    🚨 CVE-2026-8481 IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint...

  • CVE-2026-8505

    🚨 CVE-2026-8505 IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users...

  • CVE-2026-8635

    🚨 CVE-2026-8635 IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the...

  • CVE-2026-8859

    🚨 CVE-2026-8859 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to...

  • CVE-2026-13445

    🚨 CVE-2026-13445 IBM Langflow OSS 1.0.0 through 1.10.1 can allow an authenticated attacker to exploit the SaveToFile component to read and modify...

  • CVE-2026-13446

    🚨 CVE-2026-13446 IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for...

  • CVE-2026-16074

    🚨 CVE-2026-16074 A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_plugin/update_all_plugins of...

  • CVE-2026-49977

    🚨 CVE-2026-49977 tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie.purge() is called on any...

  • CVE-2026-50271

    🚨 CVE-2026-50271 Datadog dd-trace-py is the Datadog Python APM client. Prior to 4.8.2, Datadog tracing libraries that implement W3C baggage...

  • CVE-2026-50274

    🚨 CVE-2026-50274 Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring...

  • CVE-2026-53727

    🚨 CVE-2026-53727 css_parser is a Ruby CSS parser. From 2.2.0 until 3.0.0, CssParser::Parser#read_remote_file in lib/css_parser/parser.rb, and...

  • CVE-2026-54159

    🚨 CVE-2026-54159 PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the ps_facetedsearch module...

  • CVE-2026-54163

    🚨 CVE-2026-54163 secure_headers manages application of security headers with many safe defaults. Prior to 7.3.0, secure_headers builds the...

  • CVE-2026-54242

    🚨 CVE-2026-54242 Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, the Glide image proxy's URL...

  • CVE-2026-54243

    🚨 CVE-2026-54243 Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, form submission values in...

  • CVE-2026-54244

    🚨 CVE-2026-54244 Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.0 and 6.20.3, the Live Preview endpoint for...

  • CVE-2026-54466

    🚨 CVE-2026-54466 websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the...

  • CVE-2026-54490

    🚨 CVE-2026-54490 websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the...

Статистика статей

Статьи
53,091
Просмотры
267,014
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху