CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120641

    🚨 CVE-2026-120641 CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The...

  • CVE-2026-120642

    🚨 CVE-2026-120642 CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo...

  • CVE-2026-120643

    🚨 CVE-2026-120643 CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and...

  • CVE-2026-120644

    🚨 CVE-2026-120644 CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. The...

  • CVE-2026-120645

    🚨 CVE-2026-120645 CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in...

  • CVE-2026-120646

    🚨 CVE-2026-120646 CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in...

  • CVE-2026-120648

    🚨 CVE-2026-120648 CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. Arguments are placed between <!--...

  • CVE-2026-120650

    🚨 CVE-2026-120650 CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and...

  • CVE-2026-120651

    🚨 CVE-2026-120651 CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set. When...

  • CVE-2026-121583

    🚨 CVE-2026-121583 A vulnerability was identified in Sanluan PublicCMS 5. This affects the function TradePaymentService.pendingRefund of the file...

  • CVE-2026-121585

    🚨 CVE-2026-121585 A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This impacts the function RunSQL of the file...

  • CVE-2026-121589

    🚨 CVE-2026-121589 A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the...

  • CVE-2026-121597

    🚨 CVE-2026-121597 A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of...

  • CVE-2026-92185

    🚨 CVE-2026-92185 Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability. This...

  • CVE-2026-92186

    🚨 CVE-2026-92186 Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This...

  • CVE-2026-92187

    🚨 CVE-2026-92187 Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This...

  • CVE-2026-92191

    🚨 CVE-2026-92191 Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability. This vulnerability allows...

  • CVE-2026-92189

    🚨 CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This...

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху