CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119408

    🚨 CVE-2026-119408 n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code execution vulnerability via deprecated...

  • CVE-2026-119416

    🚨 CVE-2026-119416 CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that...

  • CVE-2026-119420

    🚨 CVE-2026-119420 Lago through 1.55.0 contains an authentication bypass vulnerability that allows organization administrators to obtain session...

  • CVE-2026-119424

    🚨 CVE-2026-119424 OPNsense core before 26.7.8 contains a configuration line injection vulnerability that allows authenticated users with...

  • CVE-2026-119428

    🚨 CVE-2026-119428 phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger...

  • CVE-2026-119547

    🚨 CVE-2026-119547 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains an information disclosure vulnerability in...

  • CVE-2026-119555

    🚨 CVE-2026-119555 Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an information...

  • CVE-2026-119559

    🚨 CVE-2026-119559 OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to...

  • CVE-2026-119563

    🚨 CVE-2026-119563 phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege...

  • CVE-2026-119567

    🚨 CVE-2026-119567 vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied...

  • CVE-2026-112374

    🚨 CVE-2026-112374 FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST...

  • CVE-2026-119572

    🚨 CVE-2026-119572 Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider...

  • CVE-2026-119576

    🚨 CVE-2026-119576 ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readRecord to...

  • CVE-2026-119597

    🚨 CVE-2026-119597 OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-119601

    🚨 CVE-2026-119601 AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupt heap...

  • CVE-2026-91912

    🚨 CVE-2026-91912 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low...

  • CVE-2026-91913

    🚨 CVE-2026-91913 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS...

  • CVE-2026-91914

    🚨 CVE-2026-91914 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An...

Статистика статей

Статьи
53,084
Просмотры
241,056
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху