CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121437

    🚨 CVE-2026-121437 Mistune from 3.3.0 before 3.3.4 contains a denial of service vulnerability that allows remote attackers to exhaust CPU through...

  • CVE-2026-121441

    🚨 CVE-2026-121441 Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in wasi-http...

  • CVE-2026-121445

    🚨 CVE-2026-121445 darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerability in the image-set...

  • CVE-2026-121449

    🚨 CVE-2026-121449 Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved secret values to its...

  • CVE-2026-119741

    🚨 CVE-2026-119741 rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that...

  • CVE-2026-121260

    🚨 CVE-2026-121260 A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadstring of the file...

  • CVE-2026-121453

    🚨 CVE-2026-121453 SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace...

  • CVE-2026-121548

    🚨 CVE-2026-121548 Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute...

  • CVE-2026-121552

    🚨 CVE-2026-121552 Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler that...

  • CVE-2026-121556

    🚨 CVE-2026-121556 FastBee through 2.1.0 contains an insecure direct object reference vulnerability in ProductController that allows authenticated...

  • CVE-2026-121560

    🚨 CVE-2026-121560 LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post authors to...

  • CVE-2026-103077

    🚨 CVE-2026-103077 Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security...

  • CVE-2026-103916

    🚨 CVE-2026-103916 Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspace. A malicious sandbox can create or replace...

  • CVE-2026-109593

    🚨 CVE-2026-109593 An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS...

  • CVE-2026-109594

    🚨 CVE-2026-109594 Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been...

  • CVE-2026-114183

    🚨 CVE-2026-114183 Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve...

  • CVE-2026-114185

    🚨 CVE-2026-114185 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor...

  • CVE-2026-114187

    🚨 CVE-2026-114187 Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху