CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112768

    🚨 CVE-2026-112768 Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update...

  • CVE-2026-112769

    🚨 CVE-2026-112769 Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of...

  • CVE-2026-112770

    🚨 CVE-2026-112770 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which...

  • CVE-2026-112771

    🚨 CVE-2026-112771 Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains...

  • CVE-2026-112772

    🚨 CVE-2026-112772 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users...

  • CVE-2026-112773

    🚨 CVE-2026-112773 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users...

  • CVE-2026-112774

    🚨 CVE-2026-112774 Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to...

  • CVE-2026-112775

    🚨 CVE-2026-112775 Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification...

  • CVE-2026-112776

    🚨 CVE-2026-112776 Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to...

  • CVE-2026-112777

    🚨 CVE-2026-112777 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its...

  • CVE-2026-112778

    🚨 CVE-2026-112778 Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the...

  • CVE-2026-112779

    🚨 CVE-2026-112779 Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code...

  • CVE-2026-112780

    🚨 CVE-2026-112780 Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public...

  • CVE-2026-112781

    🚨 CVE-2026-112781 Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected...

  • CVE-2026-71169

    🚨 CVE-2026-71169 Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource...

  • CVE-2026-71170

    🚨 CVE-2026-71170 Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged...

  • CVE-2026-82166

    🚨 CVE-2026-82166 Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An...

  • CVE-2026-63000

    🚨 CVE-2026-63000 REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in...

Статистика статей

Статьи
53,082
Просмотры
226,877
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху