CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-102722

    🚨 CVE-2026-102722 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP client in IPv4 passive mode opens its data connection to...

  • CVE-2026-119727

    🚨 CVE-2026-119727 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing...

  • CVE-2026-119728

    🚨 CVE-2026-119728 A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file or network...

  • CVE-2026-121259

    🚨 CVE-2026-121259 A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or...

  • CVE-2026-108949

    🚨 CVE-2026-108949 Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker. An authenticated OpenWire client that sends a...

  • CVE-2026-110021

    🚨 CVE-2026-110021 PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over...

  • CVE-2026-110022

    🚨 CVE-2026-110022 The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin repository and...

  • CVE-2026-110935

    🚨 CVE-2026-110935 The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local...

  • CVE-2026-111036

    🚨 CVE-2026-111036 Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document...

  • CVE-2026-111037

    🚨 CVE-2026-111037 A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The...

  • CVE-2026-111038

    🚨 CVE-2026-111038 CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability...

  • CVE-2026-111040

    🚨 CVE-2026-111040 The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low...

  • CVE-2026-111821

    🚨 CVE-2026-111821 Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription...

  • CVE-2026-111822

    🚨 CVE-2026-111822 Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the...

  • CVE-2026-120422

    🚨 CVE-2026-120422 Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component...

  • CVE-2026-120554

    🚨 CVE-2026-120554 The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and...

  • CVE-2026-93900

    🚨 CVE-2026-93900 The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id'...

  • CVE-2026-94459

    🚨 CVE-2026-94459 IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected...

Статистика статей

Статьи
53,088
Просмотры
263,320
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху