CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-68498

    🚨 CVE-2026-68498 StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object...

  • CVE-2026-111802

    🚨 CVE-2026-111802 A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty...

  • CVE-2026-17591

    🚨 CVE-2026-17591 A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a...

  • CVE-2026-89085

    🚨 CVE-2026-89085 A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an...

  • CVE-2026-89088

    🚨 CVE-2026-89088 A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16...

  • CVE-2026-89096

    🚨 CVE-2026-89096 A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state...

  • CVE-2026-111823

    🚨 CVE-2026-111823 Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

  • CVE-2026-111853

    🚨 CVE-2026-111853 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the...

  • CVE-2026-111854

    🚨 CVE-2026-111854 An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem...

  • CVE-2026-103376

    🚨 CVE-2026-103376 The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress...

  • CVE-2026-104122

    🚨 CVE-2026-104122 The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing...

  • CVE-2026-104246

    🚨 CVE-2026-104246 The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an...

  • CVE-2026-106470

    🚨 CVE-2026-106470 The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing...

  • CVE-2026-110527

    🚨 CVE-2026-110527 The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated...

  • CVE-2026-81343

    🚨 CVE-2026-81343 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its...

  • CVE-2026-81344

    🚨 CVE-2026-81344 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated...

  • CVE-2026-91074

    🚨 CVE-2026-91074 The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL...

  • CVE-2026-92431

    🚨 CVE-2026-92431 The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing...

Статистика статей

Статьи
53,084
Просмотры
234,256
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху