CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112405

    🚨 CVE-2026-112405 Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane...

  • CVE-2026-86872

    🚨 CVE-2026-86872 A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing...

  • CVE-2026-86940

    🚨 CVE-2026-86940 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to...

  • CVE-2026-96902

    🚨 CVE-2026-96902 The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API...

  • CVE-2026-96903

    🚨 CVE-2026-96903 The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its...

  • CVE-2026-43835

    🚨 CVE-2026-43835 A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade...

  • CVE-2026-113465

    🚨 CVE-2026-113465 It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit...

  • CVE-2026-11959

    🚨 CVE-2026-11959 Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of...

  • CVE-2026-11960

    🚨 CVE-2026-11960 Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when...

  • CVE-2026-43836

    🚨 CVE-2026-43836 A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

  • CVE-2026-43837

    🚨 CVE-2026-43837 A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to...

  • CVE-2026-43839

    🚨 CVE-2026-43839 A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash...

  • CVE-2026-43844

    🚨 CVE-2026-43844 A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

  • CVE-2026-112064

    🚨 CVE-2026-112064 The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them...

  • CVE-2026-112065

    🚨 CVE-2026-112065 The routes that provide consent history and statistics data did not check whether the backend user had access to the module or...

  • CVE-2026-112066

    🚨 CVE-2026-112066 The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with...

  • CVE-2026-112069

    🚨 CVE-2026-112069 The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These...

  • CVE-2026-112070

    🚨 CVE-2026-112070 The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any...

Статистика статей

Статьи
53,084
Просмотры
239,652
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху