CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-94228

    🚨 CVE-2026-94228 The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it...

  • CVE-2026-94229

    🚨 CVE-2026-94229 The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation...

  • CVE-2026-94230

    🚨 CVE-2026-94230 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not...

  • CVE-2026-94231

    🚨 CVE-2026-94231 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing...

  • CVE-2026-94272

    🚨 CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from...

  • CVE-2026-94294

    🚨 CVE-2026-94294 The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied...

  • CVE-2026-111439

    🚨 CVE-2026-111439 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks()...

  • CVE-2026-104679

    🚨 CVE-2026-104679 VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted...

  • CVE-2026-111438

    🚨 CVE-2026-111438 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求...

  • CVE-2026-112161

    🚨 CVE-2026-112161 MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local...

  • CVE-2026-13695

    🚨 CVE-2026-13695 SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo...

  • CVE-2026-112210

    🚨 CVE-2026-112210 A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a...

  • CVE-2026-110034

    🚨 CVE-2026-110034 The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount...

  • CVE-2026-16460

    🚨 CVE-2026-16460 A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container...

  • CVE-2026-74921

    🚨 CVE-2026-74921 The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before...

  • CVE-2026-76740

    🚨 CVE-2026-76740 A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers...

  • CVE-2026-86791

    🚨 CVE-2026-86791 The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed...

  • CVE-2026-91831

    🚨 CVE-2026-91831 The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name...

Статистика статей

Статьи
53,084
Просмотры
234,256
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху