CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-92432

    🚨 CVE-2026-92432 The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing...

  • CVE-2026-92433

    🚨 CVE-2026-92433 The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing...

  • CVE-2026-97314

    🚨 CVE-2026-97314 The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link...

  • CVE-2024-58398

    🚨 CVE-2024-58398 Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login...

  • CVE-2025-71435

    🚨 CVE-2025-71435 Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after...

  • CVE-2026-111880

    🚨 CVE-2026-111880 FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to...

  • CVE-2026-111881

    🚨 CVE-2026-111881 FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation...

  • CVE-2026-111912

    🚨 CVE-2026-111912 Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that...

  • CVE-2026-111913

    🚨 CVE-2026-111913 Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists...

  • CVE-2026-111914

    🚨 CVE-2026-111914 Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that...

  • CVE-2026-111916

    🚨 CVE-2026-111916 Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view...

  • CVE-2026-111918

    🚨 CVE-2026-111918 Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that allows...

  • CVE-2026-111919

    🚨 CVE-2026-111919 Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to keep...

  • CVE-2026-111920

    🚨 CVE-2026-111920 Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which resolves a...

  • CVE-2026-111921

    🚨 CVE-2026-111921 Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permission...

  • CVE-2026-111922

    🚨 CVE-2026-111922 Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with...

  • CVE-2026-111923

    🚨 CVE-2026-111923 Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows...

  • CVE-2026-111924

    🚨 CVE-2026-111924 Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by...

Статистика статей

Статьи
53,084
Просмотры
234,256
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху