CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115353

    🚨 CVE-2026-115353 Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read...

  • CVE-2026-112331

    🚨 CVE-2026-112331 Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a...

  • CVE-2026-115750

    🚨 CVE-2026-115750 mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture...

  • CVE-2026-116214

    🚨 CVE-2026-116214 MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset...

  • CVE-2026-111548

    🚨 CVE-2026-111548 A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An...

  • CVE-2026-117341

    🚨 CVE-2026-117341 In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the...

  • CVE-2026-117466

    🚨 CVE-2026-117466 In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system...

  • CVE-2026-102800

    🚨 CVE-2026-102800 Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful”...

  • CVE-2026-41020

    🚨 CVE-2026-41020 Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured...

  • CVE-2026-41021

    🚨 CVE-2026-41021 Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through...

  • CVE-2026-41022

    🚨 CVE-2026-41022 Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this...

  • CVE-2026-4337

    🚨 CVE-2026-4337 Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload...

  • CVE-2026-107590

    🚨 CVE-2026-107590 An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in...

  • CVE-2026-114409

    🚨 CVE-2026-114409 Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application...

  • CVE-2026-15586

    🚨 CVE-2026-15586 Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime...

  • CVE-2026-92546

    🚨 CVE-2026-92546 Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows...

  • CVE-2026-117917

    🚨 CVE-2026-117917 Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox...

  • CVE-2026-117918

    🚨 CVE-2026-117918 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR...

Статистика статей

Статьи
53,087
Просмотры
259,927
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху