CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114406

    🚨 CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple...

  • CVE-2026-116009

    🚨 CVE-2026-116009 Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write...

  • CVE-2026-116010

    🚨 CVE-2026-116010 RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write records for...

  • CVE-2026-110018

    🚨 CVE-2026-110018 The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is...

  • CVE-2026-116011

    🚨 CVE-2026-116011 Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated...

  • CVE-2026-116012

    🚨 CVE-2026-116012 Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in...

  • CVE-2026-116013

    🚨 CVE-2026-116013 OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name()...

  • CVE-2026-116014

    🚨 CVE-2026-116014 open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit...

  • CVE-2026-116015

    🚨 CVE-2026-116015 yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows...

  • CVE-2026-116016

    🚨 CVE-2026-116016 yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level...

  • CVE-2026-116017

    🚨 CVE-2026-116017 Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api...

  • CVE-2026-116018

    🚨 CVE-2026-116018 ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated...

  • CVE-2026-116019

    🚨 CVE-2026-116019 Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static...

  • CVE-2026-116020

    🚨 CVE-2026-116020 BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated...

  • CVE-2026-116008

    🚨 CVE-2026-116008 DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allows any...

  • CVE-2022-44566

    🚨 CVE-2022-44566 A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the...

  • CVE-2023-22792

    🚨 CVE-2023-22792 A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in...

  • CVE-2023-22795

    🚨 CVE-2023-22795 A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A...

Статистика статей

Статьи
53,087
Просмотры
256,406
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху