CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-117981

    🚨 CVE-2026-117981 Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159...

  • CVE-2026-117983

    🚨 CVE-2026-117983 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and...

  • CVE-2013-20007

    🚨 CVE-2013-20007 Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute...

  • CVE-2026-117610

    🚨 CVE-2026-117610 libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c...

  • CVE-2026-118373

    🚨 CVE-2026-118373 LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP URL scheme...

  • CVE-2026-101326

    🚨 CVE-2026-101326 The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is...

  • CVE-2026-109217

    🚨 CVE-2026-109217 The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all...

  • CVE-2026-116557

    🚨 CVE-2026-116557 The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a...

  • CVE-2026-119163

    🚨 CVE-2026-119163 The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to...

  • CVE-2026-120040

    🚨 CVE-2026-120040 The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...

  • CVE-2025-9462

    🚨 CVE-2025-9462 The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and...

  • CVE-2026-103882

    🚨 CVE-2026-103882 The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file...

  • CVE-2026-116086

    🚨 CVE-2026-116086 A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information...

  • CVE-2026-109197

    🚨 CVE-2026-109197 The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up...

  • CVE-2026-120202

    🚨 CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious...

  • CVE-2026-120206

    🚨 CVE-2026-120206 Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge...

  • CVE-2026-120210

    🚨 CVE-2026-120210 FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside...

  • CVE-2026-120189

    🚨 CVE-2026-120189 A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file...

Статистика статей

Статьи
53,087
Просмотры
256,406
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху