CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-94273

    🚨 CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a...

  • CVE-2026-103311

    🚨 CVE-2026-103311 The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of...

  • CVE-2026-106010

    🚨 CVE-2026-106010 The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status...

  • CVE-2026-110034

    🚨 CVE-2026-110034 The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount...

  • CVE-2026-74921

    🚨 CVE-2026-74921 The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before...

  • CVE-2026-74922

    🚨 CVE-2026-74922 The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints...

  • CVE-2026-86791

    🚨 CVE-2026-86791 The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed...

  • CVE-2026-91831

    🚨 CVE-2026-91831 The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name...

  • CVE-2026-94228

    🚨 CVE-2026-94228 The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it...

  • CVE-2026-94229

    🚨 CVE-2026-94229 The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation...

  • CVE-2026-94230

    🚨 CVE-2026-94230 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not...

  • CVE-2026-94231

    🚨 CVE-2026-94231 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing...

  • CVE-2026-94294

    🚨 CVE-2026-94294 The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied...

  • CVE-2026-108762

    🚨 CVE-2026-108762 Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly...

  • CVE-2026-108764

    🚨 CVE-2026-108764 Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed...

  • CVE-2026-108766

    🚨 CVE-2026-108766 Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed...

  • CVE-2026-108771

    🚨 CVE-2026-108771 Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the...

  • CVE-2026-108776

    🚨 CVE-2026-108776 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact...

Статистика статей

Статьи
53,082
Просмотры
209,808
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху