CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-109977

    🚨 CVE-2026-109977 The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to time-based SQL Injection...

  • CVE-2026-120659

    🚨 CVE-2026-120659 The Redirection for Contact Form 7 plugin for WordPress is vulnerable to authorization bypass in all versions up to, and...

  • CVE-2026-123327

    🚨 CVE-2026-123327 In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

  • CVE-2026-123328

    🚨 CVE-2026-123328 In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab

  • CVE-2026-123330

    🚨 CVE-2026-123330 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility...

  • CVE-2026-123331

    🚨 CVE-2026-123331 In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

  • CVE-2026-123332

    🚨 CVE-2026-123332 In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

  • CVE-2026-123333

    🚨 CVE-2026-123333 In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints

  • CVE-2026-123334

    🚨 CVE-2026-123334 In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

  • CVE-2026-123335

    🚨 CVE-2026-123335 In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any...

  • CVE-2026-103908

    🚨 CVE-2026-103908 The The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to arbitrary shortcode execution in all...

  • CVE-2026-104010

    🚨 CVE-2026-104010 The WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database plugin for WordPress is vulnerable to...

  • CVE-2026-107622

    🚨 CVE-2026-107622 The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a...

  • CVE-2026-116624

    🚨 CVE-2026-116624 The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including...

  • CVE-2026-89101

    🚨 CVE-2026-89101 The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to...

  • CVE-2026-92895

    🚨 CVE-2026-92895 The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via...

  • CVE-2026-115431

    🚨 CVE-2026-115431 Missing Authorization vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce...

  • CVE-2026-35114

    🚨 CVE-2026-35114 HCL AION is affected by a vulnerability where the X-Content-Type-Options header was missing or insecure, allowing browsers to...

Статистика статей

Статьи
53,084
Просмотры
237,111
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху