CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-72599

    🚨 CVE-2026-72599 An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item...

  • CVE-2026-72600

    🚨 CVE-2026-72600 A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice...

  • CVE-2026-72601

    🚨 CVE-2026-72601 A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions...

  • CVE-2026-72602

    🚨 CVE-2026-72602 A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to...

  • CVE-2026-72603

    🚨 CVE-2026-72603 An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary...

  • CVE-2026-72604

    🚨 CVE-2026-72604 A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary...

  • CVE-2026-72605

    🚨 CVE-2026-72605 A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user...

  • CVE-2026-72606

    🚨 CVE-2026-72606 A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server...

  • CVE-2026-72607

    🚨 CVE-2026-72607 A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with...

  • CVE-2026-72608

    🚨 CVE-2026-72608 A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with...

  • CVE-2026-72610

    🚨 CVE-2026-72610 A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with...

  • CVE-2026-72747

    🚨 CVE-2026-72747 AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious...

  • CVE-2026-72748

    🚨 CVE-2026-72748 AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows...

  • CVE-2026-72749

    🚨 CVE-2026-72749 n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node...

  • CVE-2026-72750

    🚨 CVE-2026-72750 n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation...

  • CVE-2026-72762

    🚨 CVE-2026-72762 n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which...

  • CVE-2026-72763

    🚨 CVE-2026-72763 n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for...

  • CVE-2026-72764

    🚨 CVE-2026-72764 n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions (before...

Статистика статей

Статьи
53,087
Просмотры
262,891
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху