CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120534

    🚨 CVE-2026-120534 The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and...

  • CVE-2026-120552

    🚨 CVE-2026-120552 The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPress is vulnerable to Stored Cross-Site...

  • CVE-2026-120558

    🚨 CVE-2026-120558 The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider`...

  • CVE-2026-120574

    🚨 CVE-2026-120574 The SureCart plugin for WordPress is vulnerable to unauthenticated account takeover in all versions up to, and including, 4.9.5...

  • CVE-2026-120575

    🚨 CVE-2026-120575 The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

  • CVE-2026-105982

    🚨 CVE-2026-105982 Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands...

  • CVE-2026-118444

    🚨 CVE-2026-118444 Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during instruction...

  • CVE-2026-118445

    🚨 CVE-2026-118445 A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objects. These...

  • CVE-2026-118446

    🚨 CVE-2026-118446 A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects, including...

  • CVE-2026-118447

    🚨 CVE-2026-118447 A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when instruction...

  • CVE-2026-118448

    🚨 CVE-2026-118448 A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_text. If the underlying text...

  • CVE-2026-120327

    🚨 CVE-2026-120327 The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to...

  • CVE-2026-120328

    🚨 CVE-2026-120328 The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated...

  • CVE-2026-120329

    🚨 CVE-2026-120329 Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to...

  • CVE-2026-120330

    🚨 CVE-2026-120330 Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested...

  • CVE-2026-120331

    🚨 CVE-2026-120331 Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target...

  • CVE-2026-120332

    🚨 CVE-2026-120332 The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail...

  • CVE-2026-120333

    🚨 CVE-2026-120333 The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an account) do not reject...

Статистика статей

Статьи
53,091
Просмотры
268,142
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху