CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-17335

    🚨 CVE-2026-17335 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path...

  • CVE-2026-17340

    🚨 CVE-2026-17340 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal...

  • CVE-2026-17354

    🚨 CVE-2026-17354 IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file writes due to...

  • CVE-2026-17401

    🚨 CVE-2026-17401 IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...

  • CVE-2026-123469

    🚨 CVE-2026-123469 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / StellarWP The Events...

  • CVE-2026-123530

    🚨 CVE-2026-123530 Vikunja before 2.7.1 contains a missing authentication vulnerability that allows attackers holding a stolen session to enroll...

  • CVE-2026-123574

    🚨 CVE-2026-123574 The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is...

  • CVE-2026-124330

    🚨 CVE-2026-124330 A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/remove of the file...

  • CVE-2026-124424

    🚨 CVE-2026-124424 WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token...

  • CVE-2026-124428

    🚨 CVE-2026-124428 Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated control panel users...

  • CVE-2026-124432

    🚨 CVE-2026-124432 phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnerability in the...

  • CVE-2026-124436

    🚨 CVE-2026-124436 OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify...

  • CVE-2026-124440

    🚨 CVE-2026-124440 Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows...

  • CVE-2026-124444

    🚨 CVE-2026-124444 OpenEMR before 8.4.0 contains a mass assignment vulnerability in the patient portal OnsiteDocument query API that lets request...

  • CVE-2026-124448

    🚨 CVE-2026-124448 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the CCDA/CCD preview stylesheets, where cda.xsl...

  • CVE-2026-124452

    🚨 CVE-2026-124452 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in interface/forms/eye_mag/report.php that allows...

  • CVE-2026-124457

    🚨 CVE-2026-124457 OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticated...

  • CVE-2026-124461

    🚨 CVE-2026-124461 OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload.php that allows any authenticated...

Статистика статей

Статьи
53,082
Просмотры
206,137
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху