CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123489

    🚨 CVE-2026-123489 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injection vulnerability because the sandbox-exposed...

  • CVE-2026-123490

    🚨 CVE-2026-123490 Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerability because getOwners() applies caller criteria...

  • CVE-2026-123491

    🚨 CVE-2026-123491 Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading...

  • CVE-2026-123492

    🚨 CVE-2026-123492 SiYuan before 3.8.9 contains a nil pointer dereference vulnerability in privateCacheMiddleware that allows authenticated...

  • CVE-2026-123617

    🚨 CVE-2026-123617 Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups...

  • CVE-2026-123618

    🚨 CVE-2026-123618 ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips account state and two-factor checks when...

  • CVE-2026-123619

    🚨 CVE-2026-123619 Lektor through 3.3.14 and 3.4.0b15 contains an absolute path traversal vulnerability in the admin API on Windows that allows...

  • CVE-2026-123620

    🚨 CVE-2026-123620 Usermin through 2.570 contains an OS command injection vulnerability in the Read Mail module that allows authenticated users to...

  • CVE-2026-123621

    🚨 CVE-2026-123621 Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated...

  • CVE-2026-123622

    🚨 CVE-2026-123622 Usermin through 2.570 contains a cross-site scripting vulnerability in mailbox/detach.cgi that allows remote attackers to...

  • CVE-2026-123664

    🚨 CVE-2026-123664 A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects...

  • CVE-2026-123665

    🚨 CVE-2026-123665 A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file...

  • CVE-2026-123782

    🚨 CVE-2026-123782 ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability in SaveFormField and UpdateFormRequired that...

  • CVE-2026-123783

    🚨 CVE-2026-123783 Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing...

  • CVE-2026-123784

    🚨 CVE-2026-123784 Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows attackers to...

  • CVE-2026-123785

    🚨 CVE-2026-123785 Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows attackers to...

  • CVE-2026-123786

    🚨 CVE-2026-123786 Agenta before 0.122.5 contains a server-side request forgery vulnerability that allows workspace members with workflow edit...

  • CVE-2026-53980

    🚨 CVE-2026-53980 Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the git middleware (charm.land/wish/v2) that allows...

Статистика статей

Статьи
53,084
Просмотры
238,025
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху