CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113744

    🚨 CVE-2026-113744 A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of...

  • CVE-2026-82814

    🚨 CVE-2026-82814 The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and...

  • CVE-2026-111380

    🚨 CVE-2026-111380 FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which...

  • CVE-2026-111385

    🚨 CVE-2026-111385 Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url...

  • CVE-2026-111442

    🚨 CVE-2026-111442 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure...

  • CVE-2026-111447

    🚨 CVE-2026-111447 Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the...

  • CVE-2026-104715

    🚨 CVE-2026-104715 A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged...

  • CVE-2026-44977

    🚨 CVE-2026-44977 countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44...

  • CVE-2026-111390

    🚨 CVE-2026-111390 Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters...

  • CVE-2026-48741

    🚨 CVE-2026-48741 libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and...

  • CVE-2026-57487

    🚨 CVE-2026-57487 pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes...

  • CVE-2026-92263

    🚨 CVE-2026-92263 SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore...

  • CVE-2026-95859

    🚨 CVE-2026-95859 libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT...

  • CVE-2026-49868

    🚨 CVE-2026-49868 RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior...

  • CVE-2026-86009

    🚨 CVE-2026-86009 Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers...

  • CVE-2026-92262

    🚨 CVE-2026-92262 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

  • CVE-2026-111604

    🚨 CVE-2026-111604 eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or...

  • CVE-2026-111609

    🚨 CVE-2026-111609 PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or...

Статистика статей

Статьи
53,087
Просмотры
255,260
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху