CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113598

    🚨 CVE-2026-113598 Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms...

  • CVE-2026-113599

    🚨 CVE-2026-113599 Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create...

  • CVE-2026-113600

    🚨 CVE-2026-113600 Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify...

  • CVE-2026-113603

    🚨 CVE-2026-113603 The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0...

  • CVE-2026-113604

    🚨 CVE-2026-113604 Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays...

  • CVE-2026-113605

    🚨 CVE-2026-113605 Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows...

  • CVE-2026-113606

    🚨 CVE-2026-113606 Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other...

  • CVE-2026-113607

    🚨 CVE-2026-113607 Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated...

  • CVE-2026-113608

    🚨 CVE-2026-113608 Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in...

  • CVE-2026-113610

    🚨 CVE-2026-113610 Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows...

  • CVE-2026-113611

    🚨 CVE-2026-113611 Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving...

  • CVE-2026-113612

    🚨 CVE-2026-113612 SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other...

  • CVE-2026-113613

    🚨 CVE-2026-113613 FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write...

  • CVE-2026-113679

    🚨 CVE-2026-113679 HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the...

  • CVE-2026-113680

    🚨 CVE-2026-113680 HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host...

  • CVE-2026-113681

    🚨 CVE-2026-113681 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in...

  • CVE-2026-113682

    🚨 CVE-2026-113682 Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows...

  • CVE-2026-113683

    🚨 CVE-2026-113683 VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote...

Статистика статей

Статьи
53,084
Просмотры
241,644
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху