CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121763

    🚨 CVE-2026-121763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Hummingbird...

  • CVE-2026-121764

    🚨 CVE-2026-121764 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer...

  • CVE-2026-121780

    🚨 CVE-2026-121780 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gijo Varghese Flying...

  • CVE-2026-123463

    🚨 CVE-2026-123463 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files...

  • CVE-2026-123465

    🚨 CVE-2026-123465 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve...

  • CVE-2026-123484

    🚨 CVE-2026-123484 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder...

  • CVE-2026-124586

    🚨 CVE-2026-124586 A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library...

  • CVE-2026-124587

    🚨 CVE-2026-124587 A vulnerability was identified in elizaOS eliza 2.0.3-beta.7. The affected element is an unknown function of the file...

  • CVE-2026-124588

    🚨 CVE-2026-124588 A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function...

  • CVE-2026-124589

    🚨 CVE-2026-124589 A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function...

  • CVE-2026-124637

    🚨 CVE-2026-124637 A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameters: cliNom and...

  • CVE-2026-40913

    🚨 CVE-2026-40913 Apache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `ImportError.can_read`...

  • CVE-2026-50204

    🚨 CVE-2026-50204 Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the...

  • CVE-2026-54863

    🚨 CVE-2026-54863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Review...

  • CVE-2026-66675

    🚨 CVE-2026-66675 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Motors...

  • CVE-2026-68982

    🚨 CVE-2026-68982 Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating...

  • CVE-2026-76185

    🚨 CVE-2026-76185 Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so...

  • CVE-2026-82436

    🚨 CVE-2026-82436 Description `DefaultStateSerializer`, used to persist and restore stateful bolt checkpoints, configured Kryo with class...

Статистика статей

Статьи
53,082
Просмотры
209,808
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху