CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-108647

    🚨 CVE-2026-108647 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create...

  • CVE-2026-108652

    🚨 CVE-2026-108652 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler that...

  • CVE-2026-108657

    🚨 CVE-2026-108657 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows...

  • CVE-2026-108662

    🚨 CVE-2026-108662 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove...

  • CVE-2026-108667

    🚨 CVE-2026-108667 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore...

  • CVE-2026-108677

    🚨 CVE-2026-108677 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged...

  • CVE-2026-108689

    🚨 CVE-2026-108689 Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other...

  • CVE-2026-108694

    🚨 CVE-2026-108694 ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files...

  • CVE-2026-108702

    🚨 CVE-2026-108702 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any...

  • CVE-2026-108707

    🚨 CVE-2026-108707 Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated...

  • CVE-2026-108713

    🚨 CVE-2026-108713 SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to...

  • CVE-2026-108718

    🚨 CVE-2026-108718 Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization...

  • CVE-2026-108723

    🚨 CVE-2026-108723 answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where...

  • CVE-2026-108728

    🚨 CVE-2026-108728 Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain...

  • CVE-2026-108733

    🚨 CVE-2026-108733 Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization...

  • CVE-2026-108738

    🚨 CVE-2026-108738 Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into...

  • CVE-2026-108744

    🚨 CVE-2026-108744 pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pbip paths...

  • CVE-2026-108754

    🚨 CVE-2026-108754 GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger...

Статистика статей

Статьи
53,082
Просмотры
200,099
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху