CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112948

    🚨 CVE-2026-112948 Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny...

  • CVE-2026-112949

    🚨 CVE-2026-112949 Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an...

  • CVE-2026-112950

    🚨 CVE-2026-112950 Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until 4.1.12 and 5.0.3...

  • CVE-2026-112951

    🚨 CVE-2026-112951 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content...

  • CVE-2026-112952

    🚨 CVE-2026-112952 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken'...

  • CVE-2026-112953

    🚨 CVE-2026-112953 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable...

  • CVE-2026-112954

    🚨 CVE-2026-112954 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses...

  • CVE-2026-112955

    🚨 CVE-2026-112955 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated...

  • CVE-2026-112956

    🚨 CVE-2026-112956 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import...

  • CVE-2026-113359

    🚨 CVE-2026-113359 Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from...

  • CVE-2026-113594

    🚨 CVE-2026-113594 Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide...

  • CVE-2026-113595

    🚨 CVE-2026-113595 Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any...

  • CVE-2026-113596

    🚨 CVE-2026-113596 Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users'...

  • CVE-2026-113597

    🚨 CVE-2026-113597 Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated...

  • CVE-2026-113599

    🚨 CVE-2026-113599 Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create...

  • CVE-2026-113600

    🚨 CVE-2026-113600 Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify...

  • CVE-2026-113601

    🚨 CVE-2026-113601 Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity API...

  • CVE-2026-113602

    🚨 CVE-2026-113602 json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху