CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124570

    🚨 CVE-2026-124570 A vulnerability was detected in SourceCodester Online Leave Management System 1.0. Affected is an unknown function of the file...

  • CVE-2026-124571

    🚨 CVE-2026-124571 A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown...

  • CVE-2026-107157

    🚨 CVE-2026-107157 Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the...

  • CVE-2026-115204

    🚨 CVE-2026-115204 The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does...

  • CVE-2026-115213

    🚨 CVE-2026-115213 The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API WordPress plugin through 2.0 does not prevent the administrator...

  • CVE-2026-115212

    🚨 CVE-2026-115212 The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor...

  • CVE-2026-115256

    🚨 CVE-2026-115256 The Mail Debug for WooCommerce WordPress plugin through 1.3.0 does not perform any capability, authentication, or nonce check on...

  • CVE-2026-118201

    🚨 CVE-2026-118201 The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every...

  • CVE-2026-118202

    🚨 CVE-2026-118202 The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication step...

  • CVE-2026-120409

    🚨 CVE-2026-120409 The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving...

  • CVE-2026-121759

    🚨 CVE-2026-121759 The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which...

  • CVE-2026-121874

    🚨 CVE-2026-121874 The Post Duplicator WordPress plugin before 3.0.18 does not restrict settings saves to its own options, allowing a site...

  • CVE-2026-115237

    🚨 CVE-2026-115237 The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's...

  • CVE-2026-121875

    🚨 CVE-2026-121875 The Post Duplicator WordPress plugin before 3.0.18 does not validate the capabilities assigned to roles through its permissions...

  • CVE-2026-123064

    🚨 CVE-2026-123064 The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one...

  • CVE-2026-123088

    🚨 CVE-2026-123088 The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not perform any authorization check before returning...

  • CVE-2026-123091

    🚨 CVE-2026-123091 The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than the default...

  • CVE-2026-123128

    🚨 CVE-2026-123128 The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing...

Статистика статей

Статьи
53,082
Просмотры
213,519
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху