CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123129

    🚨 CVE-2026-123129 The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of...

  • CVE-2026-123131

    🚨 CVE-2026-123131 The GemBooking WordPress plugin before 1.7.1 does not properly verify that a REST request is addressed to its own routes before...

  • CVE-2026-123145

    🚨 CVE-2026-123145 The WooCommerce Stripe Payment Gateway WordPress plugin before 11.1.0 does not exclude the account password from the checkout...

  • CVE-2026-123751

    🚨 CVE-2026-123751 The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate...

  • CVE-2026-124573

    🚨 CVE-2026-124573 A vulnerability was found in logseq 2.0.1/2.0.2. This affects the function validate-auth-token of the file...

  • CVE-2026-124574

    🚨 CVE-2026-124574 A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of...

  • CVE-2026-124575

    🚨 CVE-2026-124575 A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0. This issue affects the function...

  • CVE-2026-124576

    🚨 CVE-2026-124576 A security flaw has been discovered in BeikeShop up to 2.0.0.31. Impacted is the function OrderRepo::getOrderByNumber of the...

  • CVE-2026-81422

    🚨 CVE-2026-81422 The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-registration setting...

  • CVE-2026-109582

    🚨 CVE-2026-109582 Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the...

  • CVE-2026-113437

    🚨 CVE-2026-113437 Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes provided by Rococo...

  • CVE-2026-120386

    🚨 CVE-2026-120386 Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process...

  • CVE-2026-124577

    🚨 CVE-2026-124577 A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the...

  • CVE-2026-124578

    🚨 CVE-2026-124578 A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file...

  • CVE-2026-124579

    🚨 CVE-2026-124579 A vulnerability was determined in aaPanel BillionMail up to 4.9. Affected by this issue is some unknown functionality of the...

  • CVE-2026-124580

    🚨 CVE-2026-124580 A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the...

  • CVE-2026-107181

    🚨 CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote...

  • CVE-2026-123870

    🚨 CVE-2026-123870 The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the...

Статистика статей

Статьи
53,082
Просмотры
213,519
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху