CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112148

    🚨 CVE-2026-112148 A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS)...

  • CVE-2026-113402

    🚨 CVE-2026-113402 ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can...

  • CVE-2026-113404

    🚨 CVE-2026-113404 WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded...

  • CVE-2026-43838

    🚨 CVE-2026-43838 A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

  • CVE-2026-43845

    🚨 CVE-2026-43845 A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

  • CVE-2026-43846

    🚨 CVE-2026-43846 A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code...

  • CVE-2026-43847

    🚨 CVE-2026-43847 A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without...

  • CVE-2026-43848

    🚨 CVE-2026-43848 A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

  • CVE-2026-111844

    🚨 CVE-2026-111844 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows...

  • CVE-2026-112240

    🚨 CVE-2026-112240 The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was...

  • CVE-2026-43849

    🚨 CVE-2026-43849 A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  • CVE-2026-43851

    🚨 CVE-2026-43851 A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

  • CVE-2026-43852

    🚨 CVE-2026-43852 A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

  • CVE-2026-43853

    🚨 CVE-2026-43853 A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

  • CVE-2026-112785

    🚨 CVE-2026-112785 OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, delete...

  • CVE-2026-113351

    🚨 CVE-2026-113351 libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but...

  • CVE-2026-113356

    🚨 CVE-2026-113356 DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file...

  • CVE-2026-113382

    🚨 CVE-2026-113382 A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху