CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111766

    🚨 CVE-2026-111766 markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the...

  • CVE-2026-112260

    🚨 CVE-2026-112260 A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read...

  • CVE-2026-112768

    🚨 CVE-2026-112768 Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update...

  • CVE-2026-112769

    🚨 CVE-2026-112769 Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of...

  • CVE-2026-112770

    🚨 CVE-2026-112770 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which...

  • CVE-2026-112771

    🚨 CVE-2026-112771 Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains...

  • CVE-2026-112772

    🚨 CVE-2026-112772 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users...

  • CVE-2026-112773

    🚨 CVE-2026-112773 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users...

  • CVE-2026-112774

    🚨 CVE-2026-112774 Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to...

  • CVE-2026-112775

    🚨 CVE-2026-112775 Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification...

  • CVE-2026-112776

    🚨 CVE-2026-112776 Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to...

  • CVE-2026-112777

    🚨 CVE-2026-112777 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its...

  • CVE-2026-112778

    🚨 CVE-2026-112778 Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the...

  • CVE-2026-112779

    🚨 CVE-2026-112779 Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code...

  • CVE-2026-71169

    🚨 CVE-2026-71169 Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource...

  • CVE-2026-71170

    🚨 CVE-2026-71170 Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged...

  • CVE-2026-82166

    🚨 CVE-2026-82166 Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An...

  • CVE-2026-111946

    🚨 CVE-2026-111946 Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When...

Статистика статей

Статьи
53,084
Просмотры
235,818
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху