CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112787

    🚨 CVE-2026-112787 OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated...

  • CVE-2026-113349

    🚨 CVE-2026-113349 OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() that...

  • CVE-2026-113350

    🚨 CVE-2026-113350 react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by...

  • CVE-2026-113351

    🚨 CVE-2026-113351 libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but...

  • CVE-2026-113352

    🚨 CVE-2026-113352 uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute...

  • CVE-2026-113353

    🚨 CVE-2026-113353 LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and...

  • CVE-2026-113354

    🚨 CVE-2026-113354 Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to...

  • CVE-2026-113355

    🚨 CVE-2026-113355 Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject...

  • CVE-2026-113356

    🚨 CVE-2026-113356 DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file...

  • CVE-2026-113357

    🚨 CVE-2026-113357 @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI...

  • CVE-2026-113358

    🚨 CVE-2026-113358 LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated...

  • CVE-2026-113382

    🚨 CVE-2026-113382 A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function...

  • CVE-2026-113383

    🚨 CVE-2026-113383 A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file...

  • CVE-2026-113384

    🚨 CVE-2026-113384 A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social...

  • CVE-2026-9589

    🚨 CVE-2026-9589 Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through...

  • CVE-2025-49300

    🚨 CVE-2025-49300 Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows...

  • CVE-2026-105311

    🚨 CVE-2026-105311 The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom...

  • CVE-2026-105312

    🚨 CVE-2026-105312 A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary...

Статистика статей

Статьи
53,084
Просмотры
238,885
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху