CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111926

    🚨 CVE-2026-111926 Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler...

  • CVE-2026-111927

    🚨 CVE-2026-111927 Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname...

  • CVE-2026-111928

    🚨 CVE-2026-111928 Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of...

  • CVE-2026-111929

    🚨 CVE-2026-111929 Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC...

  • CVE-2026-111930

    🚨 CVE-2026-111930 Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, which...

  • CVE-2026-111931

    🚨 CVE-2026-111931 Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to...

  • CVE-2026-111932

    🚨 CVE-2026-111932 Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection...

  • CVE-2026-111933

    🚨 CVE-2026-111933 Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration...

  • CVE-2026-111934

    🚨 CVE-2026-111934 Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost...

  • CVE-2026-111997

    🚨 CVE-2026-111997 ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many...

  • CVE-2026-109937

    🚨 CVE-2026-109937 The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before...

  • CVE-2026-110026

    🚨 CVE-2026-110026 The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and...

  • CVE-2026-110031

    🚨 CVE-2026-110031 The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from...

  • CVE-2026-110033

    🚨 CVE-2026-110033 The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it...

  • CVE-2026-110035

    🚨 CVE-2026-110035 The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff...

  • CVE-2026-110069

    🚨 CVE-2026-110069 The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before...

  • CVE-2026-110070

    🚨 CVE-2026-110070 The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post...

  • CVE-2026-110976

    🚨 CVE-2026-110976 The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the...

Статистика статей

Статьи
53,084
Просмотры
234,256
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху