CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-108879

    🚨 CVE-2026-108879 JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows...

  • CVE-2026-108884

    🚨 CVE-2026-108884 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that...

  • CVE-2026-108891

    🚨 CVE-2026-108891 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler...

  • CVE-2026-108950

    🚨 CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that...

  • CVE-2026-109181

    🚨 CVE-2026-109181 jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or...

  • CVE-2026-109186

    🚨 CVE-2026-109186 jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users...

  • CVE-2026-109321

    🚨 CVE-2026-109321 Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a...

  • CVE-2026-109326

    🚨 CVE-2026-109326 Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2...

  • CVE-2023-54410

    🚨 CVE-2023-54410 Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documents by...

  • CVE-2025-71430

    🚨 CVE-2025-71430 Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard page...

  • CVE-2026-109599

    🚨 CVE-2026-109599 Frappe before 15.113.3 and 16.x before 16.25.0 contains a missing authorization vulnerability in which certain endpoints fail to...

  • CVE-2026-109604

    🚨 CVE-2026-109604 Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view...

  • CVE-2026-109612

    🚨 CVE-2026-109612 Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view...

  • CVE-2026-109617

    🚨 CVE-2026-109617 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that...

  • CVE-2026-109625

    🚨 CVE-2026-109625 Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in certain endpoints that...

  • CVE-2026-109630

    🚨 CVE-2026-109630 Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints...

  • CVE-2026-109635

    🚨 CVE-2026-109635 Frappe ERPNext before 15.105.0 and 16.x before 16.15.0 contains a missing authorization vulnerability in certain document...

  • CVE-2026-109645

    🚨 CVE-2026-109645 Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoints that...

Статистика статей

Статьи
53,082
Просмотры
195,627
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху