CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110886

    🚨 CVE-2026-110886 Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows...

  • CVE-2026-110895

    🚨 CVE-2026-110895 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix...

  • CVE-2026-110897

    🚨 CVE-2026-110897 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations...

  • CVE-2026-108165

    🚨 CVE-2026-108165 Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows...

  • CVE-2026-108547

    🚨 CVE-2026-108547 AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read...

  • CVE-2026-108553

    🚨 CVE-2026-108553 OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote...

  • CVE-2026-108581

    🚨 CVE-2026-108581 TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users...

  • CVE-2026-108596

    🚨 CVE-2026-108596 OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry...

  • CVE-2026-108602

    🚨 CVE-2026-108602 Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows...

  • CVE-2026-108607

    🚨 CVE-2026-108607 JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete...

  • CVE-2026-108612

    🚨 CVE-2026-108612 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler...

  • CVE-2026-108617

    🚨 CVE-2026-108617 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create...

  • CVE-2026-108622

    🚨 CVE-2026-108622 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any...

  • CVE-2026-108627

    🚨 CVE-2026-108627 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that...

  • CVE-2026-108632

    🚨 CVE-2026-108632 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler...

  • CVE-2026-108637

    🚨 CVE-2026-108637 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove...

  • CVE-2026-108591

    🚨 CVE-2026-108591 InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create...

  • CVE-2026-108642

    🚨 CVE-2026-108642 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows...

Статистика статей

Статьи
53,082
Просмотры
200,099
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху