CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119419

    🚨 CVE-2026-119419 CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated...

  • CVE-2026-119423

    🚨 CVE-2026-119423 OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attackers to plant victim IP...

  • CVE-2026-119427

    🚨 CVE-2026-119427 phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting() that allows authenticated users to...

  • CVE-2026-119546

    🚨 CVE-2026-119546 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in...

  • CVE-2026-91903

    🚨 CVE-2026-91903 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory...

  • CVE-2026-86365

    🚨 CVE-2026-86365 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. A low...

  • CVE-2026-91901

    🚨 CVE-2026-91901 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL...

  • CVE-2026-104647

    🚨 CVE-2026-104647 The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks...

  • CVE-2026-104648

    🚨 CVE-2026-104648 The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators...

  • CVE-2026-105967

    🚨 CVE-2026-105967 The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform...

  • CVE-2026-105993

    🚨 CVE-2026-105993 The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers...

  • CVE-2026-106004

    🚨 CVE-2026-106004 The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing...

  • CVE-2026-115205

    🚨 CVE-2026-115205 The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting...

  • CVE-2026-105981

    🚨 CVE-2026-105981 Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating...

  • CVE-2026-119741

    🚨 CVE-2026-119741 rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that...

  • CVE-2026-121079

    🚨 CVE-2026-121079 Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the...

  • CVE-2026-121080

    🚨 CVE-2026-121080 Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via...

  • CVE-2026-121082

    🚨 CVE-2026-121082 Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the...

Статистика статей

Статьи
53,087
Просмотры
261,983
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху