CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-71214

    🚨 CVE-2026-71214 The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the caller's Hasura session...

  • CVE-2026-71231

    🚨 CVE-2026-71231 IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded...

  • CVE-2026-71232

    🚨 CVE-2026-71232 MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content...

  • CVE-2026-71234

    🚨 CVE-2026-71234 Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with...

  • CVE-2026-71235

    🚨 CVE-2026-71235 Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when...

  • CVE-2026-71238

    🚨 CVE-2026-71238 DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/settings.py rather than read from an...

  • CVE-2026-71239

    🚨 CVE-2026-71239 DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor...

  • CVE-2026-71240

    🚨 CVE-2026-71240 DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_required or...

  • CVE-2026-71242

    🚨 CVE-2026-71242 Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-notes / view-all-notes) with no company-ownership...

  • CVE-2026-71243

    🚨 CVE-2026-71243 The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination...

  • CVE-2026-71252

    🚨 CVE-2026-71252 toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands...

  • CVE-2026-71254

    🚨 CVE-2026-71254 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14...

  • CVE-2026-71255

    🚨 CVE-2026-71255 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function...

  • CVE-2026-71256

    🚨 CVE-2026-71256 nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in...

  • CVE-2026-71261

    🚨 CVE-2026-71261 dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In...

  • CVE-2026-71263

    🚨 CVE-2026-71263 The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check...

  • CVE-2026-71264

    🚨 CVE-2026-71264 WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit...

  • CVE-2026-71266

    🚨 CVE-2026-71266 tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed...

Статистика статей

Статьи
53,087
Просмотры
261,300
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху