CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112373

    🚨 CVE-2026-112373 A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file...

  • CVE-2026-86467

    🚨 CVE-2026-86467 Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser...

  • CVE-2026-93300

    🚨 CVE-2026-93300 The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up...

  • CVE-2026-96902

    🚨 CVE-2026-96902 The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API...

  • CVE-2026-113402

    🚨 CVE-2026-113402 ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can...

  • CVE-2026-113403

    🚨 CVE-2026-113403 ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can...

  • CVE-2026-113404

    🚨 CVE-2026-113404 WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded...

  • CVE-2026-93878

    🚨 CVE-2026-93878 The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all...

  • CVE-2026-111090

    🚨 CVE-2026-111090 A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license...

  • CVE-2026-113405

    🚨 CVE-2026-113405 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL...

  • CVE-2026-113406

    🚨 CVE-2026-113406 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL...

  • CVE-2026-113407

    🚨 CVE-2026-113407 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL...

  • CVE-2026-43834

    🚨 CVE-2026-43834 A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve...

  • CVE-2026-43835

    🚨 CVE-2026-43835 A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade...

  • CVE-2026-113465

    🚨 CVE-2026-113465 It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit...

  • CVE-2026-113469

    🚨 CVE-2026-113469 A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature...

  • CVE-2026-11959

    🚨 CVE-2026-11959 Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of...

  • CVE-2026-11960

    🚨 CVE-2026-11960 Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху