CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-115242

    🚨 CVE-2026-115242 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destination folder...

  • CVE-2026-115243

    🚨 CVE-2026-115243 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it...

  • CVE-2026-115250

    🚨 CVE-2026-115250 The Text Typing WordPress plugin before 2.2.2 does not properly sanitize and escape a block attribute before storing it and...

  • CVE-2026-115257

    🚨 CVE-2026-115257 The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster...

  • CVE-2026-115262

    🚨 CVE-2026-115262 The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database...

  • CVE-2026-115426

    🚨 CVE-2026-115426 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup storage directory...

  • CVE-2026-118403

    🚨 CVE-2026-118403 The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returning its...

  • CVE-2026-118404

    🚨 CVE-2026-118404 The Premium Packages WordPress plugin before 7.3.1 does not verify ownership or session binding when loading a previously saved...

  • CVE-2026-118407

    🚨 CVE-2026-118407 The Premium Packages WordPress plugin before 7.3.1 does not verify that a user claiming a guest order is the original buyer...

  • CVE-2026-118422

    🚨 CVE-2026-118422 The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's...

  • CVE-2026-118523

    🚨 CVE-2026-118523 The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing...

  • CVE-2026-118637

    🚨 CVE-2026-118637 The Simple Download Monitor WordPress plugin before 4.1.3 does not properly check the visibility of the content referenced by...

  • CVE-2026-118783

    🚨 CVE-2026-118783 The All-in-One Video Gallery WordPress plugin before 5.0.0 does not validate and escape some of its shortcode attributes before...

  • CVE-2026-11749

    🚨 CVE-2026-11749 A vulnerability has been identified in armeria-saml prior to 1.41.1, where bearer assertions are not enforced for one-time use...

  • CVE-2026-11753

    🚨 CVE-2026-11753 A vulnerability has been identified in armeria-saml versions prior to 1.41.1, where attacker-controlled RelayState is reflected...

  • CVE-2026-16511

    🚨 CVE-2026-16511 Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0), did not validate...

  • CVE-2026-77690

    🚨 CVE-2026-77690 ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed...

  • CVE-2026-77779

    🚨 CVE-2026-77779 ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed...

Статистика статей

Статьи
53,088
Просмотры
263,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху