CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110981

    🚨 CVE-2026-110981 The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before...

  • CVE-2026-111041

    🚨 CVE-2026-111041 The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or...

  • CVE-2026-87844

    🚨 CVE-2026-87844 The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its...

  • CVE-2026-96534

    🚨 CVE-2026-96534 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not...

  • CVE-2026-111998

    🚨 CVE-2026-111998 Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain...

  • CVE-2026-111999

    🚨 CVE-2026-111999 Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to...

  • CVE-2026-112000

    🚨 CVE-2026-112000 Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to...

  • CVE-2026-112004

    🚨 CVE-2026-112004 Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename...

  • CVE-2026-112005

    🚨 CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary...

  • CVE-2026-112006

    🚨 CVE-2026-112006 OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation...

  • CVE-2026-112007

    🚨 CVE-2026-112007 Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_song() in fmt/ult.c that fails...

  • CVE-2026-112008

    🚨 CVE-2026-112008 libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt...

  • CVE-2026-112009

    🚨 CVE-2026-112009 smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read...

  • CVE-2026-112010

    🚨 CVE-2026-112010 smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to...

  • CVE-2026-112011

    🚨 CVE-2026-112011 libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a...

  • CVE-2026-112013

    🚨 CVE-2026-112013 libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash...

  • CVE-2026-112014

    🚨 CVE-2026-112014 LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API...

  • CVE-2026-112015

    🚨 CVE-2026-112015 Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by...

Статистика статей

Статьи
53,084
Просмотры
234,256
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху