CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119468

    🚨 CVE-2026-119468 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter Team...

  • CVE-2026-119481

    🚨 CVE-2026-119481 Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue...

  • CVE-2026-121144

    🚨 CVE-2026-121144 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to presence of hardcoded service account...

  • CVE-2026-121145

    🚨 CVE-2026-121145 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to insufficient validation of URLs and origins...

  • CVE-2026-121146

    🚨 CVE-2026-121146 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to the recording of authentication tokens in...

  • CVE-2026-121147

    🚨 CVE-2026-121147 This vulnerability exists in the iRA 2.0 and iRA.ev mobile applications due to improper implementation of SSL certificate...

  • CVE-2026-121373

    🚨 CVE-2026-121373 The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL...

  • CVE-2026-121620

    🚨 CVE-2026-121620 CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that allows unauthenticated...

  • CVE-2026-121936

    🚨 CVE-2026-121936 easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the...

  • CVE-2026-121937

    🚨 CVE-2026-121937 loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistoryView that allows any authenticated...

  • CVE-2026-121938

    🚨 CVE-2026-121938 langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated users to...

  • CVE-2026-121939

    🚨 CVE-2026-121939 Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links...

  • CVE-2026-121940

    🚨 CVE-2026-121940 Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability that allows authenticated users...

  • CVE-2026-121941

    🚨 CVE-2026-121941 libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers...

  • CVE-2026-121942

    🚨 CVE-2026-121942 ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in zbar/sqcode.c that allows attackers to...

  • CVE-2026-121943

    🚨 CVE-2026-121943 Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet...

  • CVE-2026-121945

    🚨 CVE-2026-121945 CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and modify...

  • CVE-2026-121946

    🚨 CVE-2026-121946 zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building...

Статистика статей

Статьи
53,088
Просмотры
263,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху