CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114530

    🚨 CVE-2026-114530 Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to...

  • CVE-2026-114531

    🚨 CVE-2026-114531 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper formatter...

  • CVE-2026-114532

    🚨 CVE-2026-114532 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows...

  • CVE-2026-114533

    🚨 CVE-2026-114533 Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful Browsing. This issue affects Ágora...

  • CVE-2026-114534

    🚨 CVE-2026-114534 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block Attributes...

  • CVE-2026-114535

    🚨 CVE-2026-114535 Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter...

  • CVE-2026-114536

    🚨 CVE-2026-114536 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS Paragraph...

  • CVE-2026-116128

    🚨 CVE-2026-116128 Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request...

  • CVE-2026-119036

    🚨 CVE-2026-119036 Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking...

  • CVE-2026-119037

    🚨 CVE-2026-119037 Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty...

  • CVE-2026-116238

    🚨 CVE-2026-116238 In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be...

  • CVE-2026-116239

    🚨 CVE-2026-116239 In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal...

  • CVE-2026-116251

    🚨 CVE-2026-116251 pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own change...

  • CVE-2026-116252

    🚨 CVE-2026-116252 pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a...

  • CVE-2026-117645

    🚨 CVE-2026-117645 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework...

  • CVE-2026-117666

    🚨 CVE-2026-117666 Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the...

  • CVE-2026-118938

    🚨 CVE-2026-118938 In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example...

  • CVE-2026-16760

    🚨 CVE-2026-16760 In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the...

Статистика статей

Статьи
53,084
Просмотры
237,111
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху