CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110070

    🚨 CVE-2026-110070 The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post...

  • CVE-2026-110976

    🚨 CVE-2026-110976 The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the...

  • CVE-2026-110981

    🚨 CVE-2026-110981 The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before...

  • CVE-2026-111041

    🚨 CVE-2026-111041 The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or...

  • CVE-2026-87844

    🚨 CVE-2026-87844 The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its...

  • CVE-2026-96534

    🚨 CVE-2026-96534 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not...

  • CVE-2026-109895

    🚨 CVE-2026-109895 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics...

  • CVE-2026-110383

    🚨 CVE-2026-110383 Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms...

  • CVE-2026-110895

    🚨 CVE-2026-110895 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix...

  • CVE-2026-111984

    🚨 CVE-2026-111984 A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html...

  • CVE-2026-111985

    🚨 CVE-2026-111985 A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function...

  • CVE-2026-111998

    🚨 CVE-2026-111998 Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain...

  • CVE-2026-111999

    🚨 CVE-2026-111999 Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to...

  • CVE-2026-112000

    🚨 CVE-2026-112000 Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to...

  • CVE-2026-112001

    🚨 CVE-2026-112001 ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to...

  • CVE-2026-112002

    🚨 CVE-2026-112002 ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets...

  • CVE-2026-112003

    🚨 CVE-2026-112003 ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with...

  • CVE-2026-112005

    🚨 CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху