CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111665

    🚨 CVE-2026-111665 Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows...

  • CVE-2026-111670

    🚨 CVE-2026-111670 ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows...

  • CVE-2026-111675

    🚨 CVE-2026-111675 Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows...

  • CVE-2026-111680

    🚨 CVE-2026-111680 APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access...

  • CVE-2026-111685

    🚨 CVE-2026-111685 IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by...

  • CVE-2026-111690

    🚨 CVE-2026-111690 Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-111700

    🚨 CVE-2026-111700 WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through...

  • CVE-2026-111705

    🚨 CVE-2026-111705 Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to...

  • CVE-2026-110008

    🚨 CVE-2026-110008 @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier...

  • CVE-2026-110902

    🚨 CVE-2026-110902 Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows...

  • CVE-2026-111828

    🚨 CVE-2026-111828 Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows...

  • CVE-2026-111829

    🚨 CVE-2026-111829 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP...

  • CVE-2026-111883

    🚨 CVE-2026-111883 Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or...

  • CVE-2026-111899

    🚨 CVE-2026-111899 KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated...

  • CVE-2026-111915

    🚨 CVE-2026-111915 Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary...

  • CVE-2026-111925

    🚨 CVE-2026-111925 Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside...

  • CVE-2026-111935

    🚨 CVE-2026-111935 NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to...

  • CVE-2026-111936

    🚨 CVE-2026-111936 Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in...

Статистика статей

Статьи
53,082
Просмотры
216,320
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху