CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123475

    🚨 CVE-2026-123475 Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting...

  • CVE-2026-123476

    🚨 CVE-2026-123476 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fifu.app Featured Image...

  • CVE-2026-123753

    🚨 CVE-2026-123753 Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous...

  • CVE-2026-123766

    🚨 CVE-2026-123766 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache...

  • CVE-2026-123770

    🚨 CVE-2026-123770 Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The multipart/form-data and...

  • CVE-2026-123779

    🚨 CVE-2026-123779 Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java. The exposeServiceMetadata service parameter was enforced...

  • CVE-2026-124590

    🚨 CVE-2026-124590 A security vulnerability has been detected in zhangbw409 library_manager_system...

  • CVE-2026-124591

    🚨 CVE-2026-124591 A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php...

  • CVE-2026-124621

    🚨 CVE-2026-124621 A vulnerability was determined in kongxin-github Java_Library_Management_System up to 70a6eb6b96fe64575d8051f1a59055bfc5dc5885...

  • CVE-2026-92546

    🚨 CVE-2026-92546 Authentication bypass by spoofing vulnerability in Keepnet Labs Ltd. Agentic AI / Agentic Ally allows Authentication Bypass...

  • CVE-2026-124621

    🚨 CVE-2026-124621 A vulnerability was determined in kongxin-github Java_Library_Management_System up to 70a6eb6b96fe64575d8051f1a59055bfc5dc5885...

  • CVE-2026-112172

    🚨 CVE-2026-112172 CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables...

  • CVE-2026-118450

    🚨 CVE-2026-118450 Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may...

  • CVE-2026-118458

    🚨 CVE-2026-118458 The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes...

  • CVE-2026-118459

    🚨 CVE-2026-118459 A time-derived emergency password can be derived from publicly available application code, enabling authentication without...

  • CVE-2026-118460

    🚨 CVE-2026-118460 Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner...

  • CVE-2026-118461

    🚨 CVE-2026-118461 The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or...

  • CVE-2026-118462

    🚨 CVE-2026-118462 Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable...

Статистика статей

Статьи
53,082
Просмотры
209,808
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху