CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-111885

    🚨 CVE-2026-111885 phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup()...

  • CVE-2026-111886

    🚨 CVE-2026-111886 phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig() 2FA removal endpoint...

  • CVE-2026-111887

    🚨 CVE-2026-111887 phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows...

  • CVE-2026-111889

    🚨 CVE-2026-111889 phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin...

  • CVE-2026-111987

    🚨 CVE-2026-111987 A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the...

  • CVE-2025-14015

    🚨 CVE-2025-14015 A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file...

  • CVE-2025-14016

    🚨 CVE-2025-14016 A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file...

  • CVE-2025-59788

    🚨 CVE-2025-59788 Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before...

  • CVE-2025-65945

    🚨 CVE-2025-65945 auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0...

  • CVE-2025-12097

    🚨 CVE-2025-12097 There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure...

  • CVE-2025-65958

    🚨 CVE-2025-65958 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side...

  • CVE-2025-13543

    🚨 CVE-2025-13543 The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the...

  • CVE-2025-27935

    🚨 CVE-2025-27935 The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server...

  • CVE-2025-65959

    🚨 CVE-2025-65959 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS...

  • CVE-2025-66479

    🚨 CVE-2025-66479 Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary...

  • CVE-2025-66555

    🚨 CVE-2025-66555 AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary...

  • CVE-2025-66571

    🚨 CVE-2025-66571 UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the...

  • CVE-2025-66572

    🚨 CVE-2025-66572 Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated...

Статистика статей

Статьи
53,082
Просмотры
195,627
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху