CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-70591

    🚨 CVE-2026-70591 Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image...

  • CVE-2026-70592

    🚨 CVE-2026-70592 Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite...

  • CVE-2026-70593

    🚨 CVE-2026-70593 Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to...

  • CVE-2026-70594

    🚨 CVE-2026-70594 Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login...

  • CVE-2026-70619

    🚨 CVE-2026-70619 Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage...

  • CVE-2026-70620

    🚨 CVE-2026-70620 Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to...

  • CVE-2026-71191

    🚨 CVE-2026-71191 In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4...

  • CVE-2026-71192

    🚨 CVE-2026-71192 In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From...

  • CVE-2026-71201

    🚨 CVE-2026-71201 In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to...

  • CVE-2026-71202

    🚨 CVE-2026-71202 The raster Rust crate's crop function (src/editor.rs) clamps the crop width/height against source dimensions but only clamps the...

  • CVE-2026-71203

    🚨 CVE-2026-71203 changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header...

  • CVE-2026-71204

    🚨 CVE-2026-71204 changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merges it into the...

  • CVE-2026-71205

    🚨 CVE-2026-71205 changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or...

  • CVE-2026-71206

    🚨 CVE-2026-71206 Shiori's CheckToken function (internal/domains/auth.go) validates only the JWT's HMAC signature and returns the embedded...

  • CVE-2026-71207

    🚨 CVE-2026-71207 The Stock-Inventory-Management-System application's login.php assigns raw username/password values to and builds its...

  • CVE-2026-71209

    🚨 CVE-2026-71209 audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET routes against...

  • CVE-2026-71210

    🚨 CVE-2026-71210 Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, checks the resolved...

  • CVE-2026-71212

    🚨 CVE-2026-71212 xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/scanner.py and downloader.py) by...

Статистика статей

Статьи
53,087
Просмотры
261,300
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху