CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-109701

    🚨 CVE-2026-109701 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET for...

  • CVE-2026-110882

    🚨 CVE-2026-110882 Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows...

  • CVE-2026-111888

    🚨 CVE-2026-111888 phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the...

  • CVE-2026-111893

    🚨 CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in...

  • CVE-2026-111898

    🚨 CVE-2026-111898 phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over...

  • CVE-2026-111904

    🚨 CVE-2026-111904 phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to...

  • CVE-2026-111909

    🚨 CVE-2026-111909 phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated...

  • CVE-2026-111914

    🚨 CVE-2026-111914 Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that...

  • CVE-2026-111920

    🚨 CVE-2026-111920 Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which resolves a...

  • CVE-2026-111926

    🚨 CVE-2026-111926 Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler...

  • CVE-2026-111931

    🚨 CVE-2026-111931 Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to...

  • CVE-2026-111997

    🚨 CVE-2026-111997 ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many...

  • CVE-2026-109937

    🚨 CVE-2026-109937 The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before...

  • CVE-2026-110026

    🚨 CVE-2026-110026 The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and...

  • CVE-2026-110031

    🚨 CVE-2026-110031 The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from...

  • CVE-2026-110033

    🚨 CVE-2026-110033 The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it...

  • CVE-2026-110035

    🚨 CVE-2026-110035 The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff...

  • CVE-2026-110069

    🚨 CVE-2026-110069 The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху