CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112068

    🚨 CVE-2026-112068 The backend module does not check whether a backend user has access to the requested site. Users with access to the module can...

  • CVE-2026-112069

    🚨 CVE-2026-112069 The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These...

  • CVE-2026-112070

    🚨 CVE-2026-112070 The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any...

  • CVE-2026-112071

    🚨 CVE-2026-112071 The order cancellation function accepts an order identifier from the request and acts on that order without checking that the...

  • CVE-2026-112237

    🚨 CVE-2026-112237 The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the...

  • CVE-2026-112238

    🚨 CVE-2026-112238 The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard...

  • CVE-2026-112239

    🚨 CVE-2026-112239 The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It...

  • CVE-2026-112240

    🚨 CVE-2026-112240 The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was...

  • CVE-2026-113381

    🚨 CVE-2026-113381 A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the...

  • CVE-2026-113442

    🚨 CVE-2026-113442 Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use...

  • CVE-2026-113459

    🚨 CVE-2026-113459 In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor...

  • CVE-2026-113468

    🚨 CVE-2026-113468 The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider...

  • CVE-2026-43849

    🚨 CVE-2026-43849 A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  • CVE-2026-43850

    🚨 CVE-2026-43850 A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

  • CVE-2026-43851

    🚨 CVE-2026-43851 A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

  • CVE-2026-43852

    🚨 CVE-2026-43852 A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

  • CVE-2026-43853

    🚨 CVE-2026-43853 A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

  • CVE-2026-43854

    🚨 CVE-2026-43854 A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху