CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-96660

    🚨 CVE-2026-96660 The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User...

  • CVE-2026-110384

    🚨 CVE-2026-110384 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy...

  • CVE-2026-100316

    🚨 CVE-2026-100316 The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

  • CVE-2026-109983

    🚨 CVE-2026-109983 The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' parameter in all...

  • CVE-2026-110253

    🚨 CVE-2026-110253 The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media file...

  • CVE-2026-111110

    🚨 CVE-2026-111110 The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site...

  • CVE-2026-110889

    🚨 CVE-2026-110889 Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve...

  • CVE-2026-109701

    🚨 CVE-2026-109701 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET for...

  • CVE-2025-71435

    🚨 CVE-2025-71435 Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after...

  • CVE-2026-110882

    🚨 CVE-2026-110882 Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows...

  • CVE-2026-111890

    🚨 CVE-2026-111890 phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights...

  • CVE-2026-111895

    🚨 CVE-2026-111895 phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow...

  • CVE-2026-111906

    🚨 CVE-2026-111906 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch...

  • CVE-2026-111911

    🚨 CVE-2026-111911 phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach...

  • CVE-2026-111917

    🚨 CVE-2026-111917 Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket access...

  • CVE-2026-111922

    🚨 CVE-2026-111922 Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with...

  • CVE-2026-111928

    🚨 CVE-2026-111928 Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of...

  • CVE-2026-111865

    🚨 CVE-2026-111865 A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function...

Статистика статей

Статьи
53,082
Просмотры
216,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху