CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112142

    🚨 CVE-2026-112142 A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected...

  • CVE-2026-112199

    🚨 CVE-2026-112199 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce...

  • CVE-2026-112214

    🚨 CVE-2026-112214 A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled...

  • CVE-2026-38671

    🚨 CVE-2026-38671 Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior...

  • CVE-2026-89632

    🚨 CVE-2026-89632 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in...

  • CVE-2026-84019

    🚨 CVE-2026-84019 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

  • CVE-2026-84018

    🚨 CVE-2026-84018 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  • CVE-2026-107194

    🚨 CVE-2026-107194 Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request...

  • CVE-2026-84020

    🚨 CVE-2026-84020 Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  • CVE-2026-98405

    🚨 CVE-2026-98405 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in...

  • CVE-2026-111625

    🚨 CVE-2026-111625 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level...

  • CVE-2026-111630

    🚨 CVE-2026-111630 abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement...

  • CVE-2026-111635

    🚨 CVE-2026-111635 Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside...

  • CVE-2026-111640

    🚨 CVE-2026-111640 DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the...

  • CVE-2026-111645

    🚨 CVE-2026-111645 MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows...

  • CVE-2026-111650

    🚨 CVE-2026-111650 ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows...

  • CVE-2026-111655

    🚨 CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super...

  • CVE-2026-111660

    🚨 CVE-2026-111660 waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any...

Статистика статей

Статьи
53,082
Просмотры
216,320
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху