CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120463

    🚨 CVE-2026-120463 Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an...

  • CVE-2026-120426

    🚨 CVE-2026-120426 OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that...

  • CVE-2026-120430

    🚨 CVE-2026-120430 Camaleon CMS before 2.9.2 contains an insecure direct object reference vulnerability in Admin::CategoriesController that allows...

  • CVE-2026-120434

    🚨 CVE-2026-120434 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's...

  • CVE-2026-120438

    🚨 CVE-2026-120438 QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap...

  • CVE-2026-120442

    🚨 CVE-2026-120442 ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-120446

    🚨 CVE-2026-120446 madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because...

  • CVE-2026-120450

    🚨 CVE-2026-120450 LaraDashboard 1.4.0 before 1.4.9 contains an improper authorization vulnerability that allows authenticated users with read-only...

  • CVE-2026-120454

    🚨 CVE-2026-120454 The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows...

  • CVE-2026-123017

    🚨 CVE-2026-123017 GodotSteam 4.17 through 4.23.2 trusts the peer value of 1 to mean that a player is the server. A grant_gold(1000000) call can be...

  • CVE-2026-103863

    🚨 CVE-2026-103863 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine...

  • CVE-2026-103864

    🚨 CVE-2026-103864 Improper output neutralization for logs in Apache Sling Engine. This issue affects Apache Sling Engine: before 3.0.4...

  • CVE-2026-103866

    🚨 CVE-2026-103866 Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The...

  • CVE-2026-95652

    🚨 CVE-2026-95652 Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute...

  • CVE-2026-105321

    🚨 CVE-2026-105321 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications...

  • CVE-2026-123059

    🚨 CVE-2026-123059 In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store...

  • CVE-2026-66903

    🚨 CVE-2026-66903 Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache...

  • CVE-2026-71901

    🚨 CVE-2026-71901 Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. An authenticate user with...

Статистика статей

Статьи
53,084
Просмотры
241,056
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху