CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114039

    🚨 CVE-2026-114039 A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of...

  • CVE-2026-114040

    🚨 CVE-2026-114040 A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function...

  • CVE-2026-92822

    🚨 CVE-2026-92822 A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through...

  • CVE-2026-92823

    🚨 CVE-2026-92823 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom...

  • CVE-2026-92824

    🚨 CVE-2026-92824 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of...

  • CVE-2026-82819

    🚨 CVE-2026-82819 A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated...

  • CVE-2026-84268

    🚨 CVE-2026-84268 A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause...

  • CVE-2026-100145

    🚨 CVE-2026-100145 The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes that...

  • CVE-2026-102499

    🚨 CVE-2026-102499 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not...

  • CVE-2026-16487

    🚨 CVE-2026-16487 A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable...

  • CVE-2026-105257

    🚨 CVE-2026-105257 The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is assigned...

  • CVE-2026-105262

    🚨 CVE-2026-105262 The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translations...

  • CVE-2026-105992

    🚨 CVE-2026-105992 The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment...

  • CVE-2026-105996

    🚨 CVE-2026-105996 The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source of...

  • CVE-2026-105998

    🚨 CVE-2026-105998 The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its...

  • CVE-2026-105999

    🚨 CVE-2026-105999 The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning calendar-account...

  • CVE-2026-106932

    🚨 CVE-2026-106932 The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on several of its authenticated AJAX...

  • CVE-2026-103302

    🚨 CVE-2026-103302 The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notifications...

Статистика статей

Статьи
53,087
Просмотры
256,406
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху