CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-65527

    🚨 CVE-2026-65527 Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.

  • CVE-2026-65528

    🚨 CVE-2026-65528 Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions.

  • CVE-2026-65531

    🚨 CVE-2026-65531 Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.

  • CVE-2026-65532

    🚨 CVE-2026-65532 Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.

  • CVE-2026-65533

    🚨 CVE-2026-65533 Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions.

  • CVE-2026-65534

    🚨 CVE-2026-65534 Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions.

  • CVE-2026-65535

    🚨 CVE-2026-65535 Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.

  • CVE-2026-65537

    🚨 CVE-2026-65537 Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.

  • CVE-2026-65538

    🚨 CVE-2026-65538 Author Cross Site Scripting (XSS) in Machete <= 5.2 versions.

  • CVE-2026-65539

    🚨 CVE-2026-65539 Unauthenticated Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap <= 4.0 versions.

  • CVE-2026-65540

    🚨 CVE-2026-65540 Unauthenticated Cross Site Request Forgery (CSRF) in Popup for CF7 with Sweet Alert <= 1.6.5 versions.

  • CVE-2026-65550

    🚨 CVE-2026-65550 Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions.

  • CVE-2026-65605

    🚨 CVE-2026-65605 SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View (database) cell rendering. A Template...

  • CVE-2026-65607

    🚨 CVE-2026-65607 SiYuan before v3.7.2 contains a path traversal vulnerability in the /export/temp/ short-circuit branch of the serveExport handler...

  • CVE-2026-65608

    🚨 CVE-2026-65608 Grav versions >= 1.7.0 and before 2.0.9 contain a remote code execution vulnerability. FlexDirectory::dynamicDataField() resolves...

  • CVE-2026-65895

    🚨 CVE-2026-65895 Grav API Plugin versions before 1.0.10 fail to restrict write access to security-critical plugin configuration scopes, allowing...

  • CVE-2026-65896

    🚨 CVE-2026-65896 Grav API Plugin (Composer package getgrav/grav-plugin-api) before 1.0.10 fails to properly validate the slug field in the POST...

  • CVE-2026-65897

    🚨 CVE-2026-65897 Grav API Plugin versions before 1.0.10 fail to validate the groups field in InvitationsController::create(), allowing...

Статистика статей

Статьи
53,087
Просмотры
258,922
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху