CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91075

    🚨 CVE-2026-91075 The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 through 4.7.5 does not verify the authenticity of incoming...

  • CVE-2026-120327

    🚨 CVE-2026-120327 The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to...

  • CVE-2026-120328

    🚨 CVE-2026-120328 The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated...

  • CVE-2026-120329

    🚨 CVE-2026-120329 Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to...

  • CVE-2026-120330

    🚨 CVE-2026-120330 Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested...

  • CVE-2026-120331

    🚨 CVE-2026-120331 Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target...

  • CVE-2026-120332

    🚨 CVE-2026-120332 The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail...

  • CVE-2026-120333

    🚨 CVE-2026-120333 The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an account) do not reject...

  • CVE-2026-89229

    🚨 CVE-2026-89229 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot...

  • CVE-2026-121458

    🚨 CVE-2026-121458 Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP content read tools that allows...

  • CVE-2026-106991

    🚨 CVE-2026-106991 hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. Any registered user can delete, lock, or sticky any...

  • CVE-2026-121424

    🚨 CVE-2026-121424 Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to...

  • CVE-2026-121425

    🚨 CVE-2026-121425 Nodemailer from 3.0.0 before 10.1.4 contains a parsing flaw in addressparser that ends an RFC 5322 group at a semicolon inside...

  • CVE-2026-121426

    🚨 CVE-2026-121426 Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a '>'...

  • CVE-2026-121442

    🚨 CVE-2026-121442 Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allows authenticated employees to view other...

  • CVE-2026-121448

    🚨 CVE-2026-121448 Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete...

  • CVE-2026-121449

    🚨 CVE-2026-121449 Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved secret values to its...

  • CVE-2026-118487

    🚨 CVE-2026-118487 In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates a `RecordParser` without...

Статистика статей

Статьи
53,092
Просмотры
269,975
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху