CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112071

    🚨 CVE-2026-112071 The order cancellation function accepts an order identifier from the request and acts on that order without checking that the...

  • CVE-2026-112238

    🚨 CVE-2026-112238 The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard...

  • CVE-2026-112239

    🚨 CVE-2026-112239 The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It...

  • CVE-2026-113442

    🚨 CVE-2026-113442 Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use...

  • CVE-2026-113459

    🚨 CVE-2026-113459 In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor...

  • CVE-2026-113468

    🚨 CVE-2026-113468 The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider...

  • CVE-2026-43857

    🚨 CVE-2026-43857 A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

  • CVE-2026-43858

    🚨 CVE-2026-43858 A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  • CVE-2026-108062

    🚨 CVE-2026-108062 Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request...

  • CVE-2026-108089

    🚨 CVE-2026-108089 ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in...

  • CVE-2026-112787

    🚨 CVE-2026-112787 OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated...

  • CVE-2026-9589

    🚨 CVE-2026-9589 Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through...

  • CVE-2026-14933

    🚨 CVE-2026-14933 Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on...

  • CVE-2026-18205

    🚨 CVE-2026-18205 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics...

  • CVE-2026-113391

    🚨 CVE-2026-113391 A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file...

  • CVE-2026-113619

    🚨 CVE-2026-113619 In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template...

  • CVE-2026-113620

    🚨 CVE-2026-113620 In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify...

  • CVE-2026-103119

    🚨 CVE-2026-103119 Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху