CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120833

    🚨 CVE-2026-120833 labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes...

  • CVE-2026-103379

    🚨 CVE-2026-103379 The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint...

  • CVE-2026-104647

    🚨 CVE-2026-104647 The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks...

  • CVE-2026-104648

    🚨 CVE-2026-104648 The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators...

  • CVE-2026-105967

    🚨 CVE-2026-105967 The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform...

  • CVE-2026-105993

    🚨 CVE-2026-105993 The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers...

  • CVE-2026-106004

    🚨 CVE-2026-106004 The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing...

  • CVE-2026-115205

    🚨 CVE-2026-115205 The AZEXO Store Locator WordPress plugin through 1.4 does not have a capability check or any authorization control when deleting...

  • CVE-2026-103653

    🚨 CVE-2026-103653 An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt CoAP...

  • CVE-2026-120988

    🚨 CVE-2026-120988 billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during...

  • CVE-2026-74846

    🚨 CVE-2026-74846 Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in...

  • CVE-2026-103327

    🚨 CVE-2026-103327 The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity of the payment notifications received...

  • CVE-2026-105978

    🚨 CVE-2026-105978 Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating...

  • CVE-2026-105979

    🚨 CVE-2026-105979 Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system...

  • CVE-2026-105980

    🚨 CVE-2026-105980 Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system...

  • CVE-2026-105981

    🚨 CVE-2026-105981 Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating...

  • CVE-2026-105982

    🚨 CVE-2026-105982 Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands...

  • CVE-2026-109161

    🚨 CVE-2026-109161 Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху