CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112292

    🚨 CVE-2026-112292 CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and...

  • CVE-2026-112293

    🚨 CVE-2026-112293 BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team...

  • CVE-2026-112294

    🚨 CVE-2026-112294 FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows...

  • CVE-2026-112295

    🚨 CVE-2026-112295 FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected...

  • CVE-2026-112296

    🚨 CVE-2026-112296 FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain...

  • CVE-2026-8168

    🚨 CVE-2026-8168 Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a...

  • CVE-2026-112328

    🚨 CVE-2026-112328 The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX...

  • CVE-2026-112329

    🚨 CVE-2026-112329 The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message...

  • CVE-2026-86375

    🚨 CVE-2026-86375 Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An...

  • CVE-2026-107566

    🚨 CVE-2026-107566 Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0...

  • CVE-2026-107567

    🚨 CVE-2026-107567 Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote...

  • CVE-2026-107568

    🚨 CVE-2026-107568 Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6)...

  • CVE-2026-107569

    🚨 CVE-2026-107569 Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated...

  • CVE-2026-107571

    🚨 CVE-2026-107571 Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local...

  • CVE-2026-109431

    🚨 CVE-2026-109431 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task...

  • CVE-2026-109432

    🚨 CVE-2026-109432 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where...

  • CVE-2026-109433

    🚨 CVE-2026-109433 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp...

  • CVE-2026-111045

    🚨 CVE-2026-111045 CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace...

Статистика статей

Статьи
53,084
Просмотры
234,256
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху