CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114630

    🚨 CVE-2026-114630 The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to...

  • CVE-2026-116551

    🚨 CVE-2026-116551 The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all...

  • CVE-2026-116624

    🚨 CVE-2026-116624 The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including...

  • CVE-2026-119178

    🚨 CVE-2026-119178 The Smart Cookie Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all...

  • CVE-2026-119211

    🚨 CVE-2026-119211 The AAA Autoload Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'option_page' parameter in...

  • CVE-2026-120035

    🚨 CVE-2026-120035 The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is...

  • CVE-2026-123655

    🚨 CVE-2026-123655 A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to...

  • CVE-2026-74756

    🚨 CVE-2026-74756 Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup...

  • CVE-2026-76168

    🚨 CVE-2026-76168 In Apache James server prior version 3.9.1 relying on the SieveFileRepository incorect validation of file paths can result in...

  • CVE-2026-76171

    🚨 CVE-2026-76171 In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to...

  • CVE-2026-85108

    🚨 CVE-2026-85108 Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service...

  • CVE-2026-85111

    🚨 CVE-2026-85111 Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service...

  • CVE-2026-89101

    🚨 CVE-2026-89101 The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to...

  • CVE-2026-92895

    🚨 CVE-2026-92895 The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via...

  • CVE-2026-114571

    🚨 CVE-2026-114571 Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions...

  • CVE-2026-114573

    🚨 CVE-2026-114573 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus allows...

  • CVE-2026-118540

    🚨 CVE-2026-118540 Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core...

  • CVE-2026-118541

    🚨 CVE-2026-118541 Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху