CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-87374

    🚨 CVE-2026-87374 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions...

  • CVE-2026-87399

    🚨 CVE-2026-87399 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported...

  • CVE-2026-116016

    🚨 CVE-2026-116016 yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level...

  • CVE-2026-116204

    🚨 CVE-2026-116204 YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action...

  • CVE-2026-116208

    🚨 CVE-2026-116208 YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets...

  • CVE-2026-116823

    🚨 CVE-2026-116823 YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...

  • CVE-2023-54413

    🚨 CVE-2023-54413 WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows...

  • CVE-2022-51022

    🚨 CVE-2022-51022 YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the...

  • CVE-2026-116827

    🚨 CVE-2026-116827 YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function...

  • CVE-2026-118691

    🚨 CVE-2026-118691 xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint that...

  • CVE-2026-110200

    🚨 CVE-2026-110200 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to...

  • CVE-2026-118079

    🚨 CVE-2026-118079 Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object...

  • CVE-2026-118673

    🚨 CVE-2026-118673 KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0...

  • CVE-2026-119144

    🚨 CVE-2026-119144 Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because...

  • CVE-2026-118760

    🚨 CVE-2026-118760 Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.17.0, the...

  • CVE-2026-118764

    🚨 CVE-2026-118764 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and...

  • CVE-2026-118768

    🚨 CVE-2026-118768 Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from a...

  • CVE-2026-118774

    🚨 CVE-2026-118774 Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху