CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-109281

    🚨 CVE-2026-109281 ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx...

  • CVE-2026-109286

    🚨 CVE-2026-109286 Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any...

  • CVE-2026-109291

    🚨 CVE-2026-109291 Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute...

  • CVE-2026-109296

    🚨 CVE-2026-109296 Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model...

  • CVE-2026-109301

    🚨 CVE-2026-109301 Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects...

  • CVE-2026-109306

    🚨 CVE-2026-109306 Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in...

  • CVE-2026-109311

    🚨 CVE-2026-109311 vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's...

  • CVE-2026-109316

    🚨 CVE-2026-109316 Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated...

  • CVE-2026-109640

    🚨 CVE-2026-109640 Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify records...

  • CVE-2026-109941

    🚨 CVE-2026-109941 FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways...

  • CVE-2026-109946

    🚨 CVE-2026-109946 FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an...

  • CVE-2026-109951

    🚨 CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy...

  • CVE-2026-110615

    🚨 CVE-2026-110615 jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows...

  • CVE-2026-110835

    🚨 CVE-2026-110835 FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token...

  • CVE-2026-111389

    🚨 CVE-2026-111389 Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some...

  • CVE-2026-109461

    🚨 CVE-2026-109461 Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose...

  • CVE-2026-104734

    🚨 CVE-2026-104734 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in...

  • CVE-2026-107762

    🚨 CVE-2026-107762 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху