CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-7187

    🚨 CVE-2026-7187 Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not...

  • CVE-2026-63727

    🚨 CVE-2026-63727 Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user...

  • CVE-2026-66299

    🚨 CVE-2026-66299 Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat...

  • CVE-2026-66713

    🚨 CVE-2026-66713 Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in Apache Software Foundation Apache...

  • CVE-2026-6879

    🚨 CVE-2026-6879 `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates...

  • CVE-2026-8164

    🚨 CVE-2026-8164 Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client...

  • CVE-2026-43910

    🚨 CVE-2026-43910 Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1...

  • CVE-2026-45293

    🚨 CVE-2026-45293 WordPress Coding Standards is a set of PHP_CodeSniffer rules (sniffs) that enforce WordPress coding conventions. From 0.14.1...

  • CVE-2026-47427

    🚨 CVE-2026-47427 GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go...

  • CVE-2026-54545

    🚨 CVE-2026-54545 wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module...

  • CVE-2026-54593

    🚨 CVE-2026-54593 Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the...

  • CVE-2026-61609

    🚨 CVE-2026-61609 Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limiter defined...

  • CVE-2026-62828

    🚨 CVE-2026-62828 Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

  • CVE-2026-66746

    🚨 CVE-2026-66746 Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary...

  • CVE-2026-66748

    🚨 CVE-2026-66748 Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with...

  • CVE-2026-66749

    🚨 CVE-2026-66749 Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server...

  • CVE-2026-66750

    🚨 CVE-2026-66750 Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download...

  • CVE-2026-66751

    🚨 CVE-2026-66751 Let's Chat 0.3.0 through 0.4.8 contains an improper authorization vulnerability that allows any authenticated user to archive any...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху