CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123309

    🚨 CVE-2026-123309 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview

  • CVE-2026-123311

    🚨 CVE-2026-123311 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible

  • CVE-2026-123314

    🚨 CVE-2026-123314 In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request

  • CVE-2026-123316

    🚨 CVE-2026-123316 In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

  • CVE-2026-123324

    🚨 CVE-2026-123324 In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

  • CVE-2026-123325

    🚨 CVE-2026-123325 In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the...

  • CVE-2026-123336

    🚨 CVE-2026-123336 In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion

  • CVE-2026-123337

    🚨 CVE-2026-123337 In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility

  • CVE-2026-107658

    🚨 CVE-2026-107658 The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and...

  • CVE-2026-116545

    🚨 CVE-2026-116545 The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is...

  • CVE-2026-116551

    🚨 CVE-2026-116551 The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all...

  • CVE-2026-119178

    🚨 CVE-2026-119178 The Smart Cookie Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all...

  • CVE-2026-119211

    🚨 CVE-2026-119211 The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'option_page' parameter in...

  • CVE-2026-120035

    🚨 CVE-2026-120035 The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is...

  • CVE-2026-123655

    🚨 CVE-2026-123655 A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to...

  • CVE-2026-109883

    🚨 CVE-2026-109883 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor...

  • CVE-2026-109884

    🚨 CVE-2026-109884 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor...

  • CVE-2026-115952

    🚨 CVE-2026-115952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator...

Статистика статей

Статьи
53,084
Просмотры
238,025
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху