CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-108983

    🚨 CVE-2026-108983 A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

  • CVE-2026-102503

    🚨 CVE-2026-102503 Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server...

  • CVE-2026-103091

    🚨 CVE-2026-103091 Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy...

  • CVE-2026-111441

    🚨 CVE-2026-111441 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与...

  • CVE-2026-111440

    🚨 CVE-2026-111440 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用...

  • CVE-2026-106014

    🚨 CVE-2026-106014 The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification...

  • CVE-2026-106028

    🚨 CVE-2026-106028 The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating...

  • CVE-2026-106933

    🚨 CVE-2026-106933 The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for...

  • CVE-2026-108120

    🚨 CVE-2026-108120 Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's...

  • CVE-2026-108121

    🚨 CVE-2026-108121 Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME...

  • CVE-2026-16487

    🚨 CVE-2026-16487 A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable...

  • CVE-2026-76739

    🚨 CVE-2026-76739 A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be...

  • CVE-2026-89286

    🚨 CVE-2026-89286 The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the...

  • CVE-2026-91046

    🚨 CVE-2026-91046 The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution...

  • CVE-2026-91047

    🚨 CVE-2026-91047 The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce...

  • CVE-2026-94273

    🚨 CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a...

  • CVE-2026-103311

    🚨 CVE-2026-103311 The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of...

  • CVE-2026-106010

    🚨 CVE-2026-106010 The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status...

Статистика статей

Статьи
53,084
Просмотры
234,256
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху