CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112295

    🚨 CVE-2026-112295 FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected...

  • CVE-2026-112147

    🚨 CVE-2026-112147 A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the...

  • CVE-2026-112149

    🚨 CVE-2026-112149 A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This...

  • CVE-2026-109432

    🚨 CVE-2026-109432 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where...

  • CVE-2026-109433

    🚨 CVE-2026-109433 Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp...

  • CVE-2026-111053

    🚨 CVE-2026-111053 FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated...

  • CVE-2026-111058

    🚨 CVE-2026-111058 Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default...

  • CVE-2026-112152

    🚨 CVE-2026-112152 A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4...

  • CVE-2026-112153

    🚨 CVE-2026-112153 A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects...

  • CVE-2026-112158

    🚨 CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file...

  • CVE-2026-112306

    🚨 CVE-2026-112306 NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to...

  • CVE-2026-112307

    🚨 CVE-2026-112307 sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying...

  • CVE-2026-112363

    🚨 CVE-2026-112363 Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows...

  • CVE-2026-112366

    🚨 CVE-2026-112366 Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event...

  • CVE-2024-4412

    🚨 CVE-2024-4412 The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language...

  • CVE-2025-10149

    🚨 CVE-2025-10149 The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local...

  • CVE-2025-13173

    🚨 CVE-2025-13173 Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO...

  • CVE-2025-13591

    🚨 CVE-2025-13591 The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist...

Статистика статей

Статьи
53,082
Просмотры
221,331
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху