CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-43848

    🚨 CVE-2026-43848 A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

  • CVE-2026-92287

    🚨 CVE-2026-92287 Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects...

  • CVE-2026-111844

    🚨 CVE-2026-111844 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows...

  • CVE-2026-112064

    🚨 CVE-2026-112064 The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them...

  • CVE-2026-112065

    🚨 CVE-2026-112065 The routes that provide consent history and statistics data did not check whether the backend user had access to the module or...

  • CVE-2026-112066

    🚨 CVE-2026-112066 The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with...

  • CVE-2026-112067

    🚨 CVE-2026-112067 The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a...

  • CVE-2026-112068

    🚨 CVE-2026-112068 The backend module does not check whether a backend user has access to the requested site. Users with access to the module can...

  • CVE-2026-112069

    🚨 CVE-2026-112069 The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These...

  • CVE-2026-112070

    🚨 CVE-2026-112070 The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any...

  • CVE-2026-112071

    🚨 CVE-2026-112071 The order cancellation function accepts an order identifier from the request and acts on that order without checking that the...

  • CVE-2026-112237

    🚨 CVE-2026-112237 The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the...

  • CVE-2026-112238

    🚨 CVE-2026-112238 The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard...

  • CVE-2026-112239

    🚨 CVE-2026-112239 The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It...

  • CVE-2026-112240

    🚨 CVE-2026-112240 The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was...

  • CVE-2026-113378

    🚨 CVE-2026-113378 A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file...

  • CVE-2026-113381

    🚨 CVE-2026-113381 A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the...

  • CVE-2026-113442

    🚨 CVE-2026-113442 Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use...

Статистика статей

Статьи
53,084
Просмотры
238,885
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху