CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-93878

    🚨 CVE-2026-93878 The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all...

  • CVE-2026-112177

    🚨 CVE-2026-112177 A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during...

  • CVE-2026-113378

    🚨 CVE-2026-113378 A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file...

  • CVE-2026-113381

    🚨 CVE-2026-113381 A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the...

  • CVE-2026-112784

    🚨 CVE-2026-112784 OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any...

  • CVE-2026-112786

    🚨 CVE-2026-112786 OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged...

  • CVE-2026-113350

    🚨 CVE-2026-113350 react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by...

  • CVE-2026-113352

    🚨 CVE-2026-113352 uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute...

  • CVE-2026-113355

    🚨 CVE-2026-113355 Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject...

  • CVE-2026-113357

    🚨 CVE-2026-113357 @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI...

  • CVE-2026-113383

    🚨 CVE-2026-113383 A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file...

  • CVE-2026-113385

    🚨 CVE-2026-113385 A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function...

  • CVE-2026-113389

    🚨 CVE-2026-113389 A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function...

  • CVE-2026-18205

    🚨 CVE-2026-18205 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics...

  • CVE-2026-105941

    🚨 CVE-2026-105941 The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format...

  • CVE-2026-101296

    🚨 CVE-2026-101296 A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non...

  • CVE-2026-101356

    🚨 CVE-2026-101356 Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can...

  • CVE-2026-103119

    🚨 CVE-2026-103119 Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху