CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120758

    🚨 CVE-2026-120758 HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a...

  • CVE-2026-121260

    🚨 CVE-2026-121260 A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. This issue affects the function loadstring of the file...

  • CVE-2026-121450

    🚨 CVE-2026-121450 CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the...

  • CVE-2026-121451

    🚨 CVE-2026-121451 AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration...

  • CVE-2026-121453

    🚨 CVE-2026-121453 SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace...

  • CVE-2026-121454

    🚨 CVE-2026-121454 Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated...

  • CVE-2026-121455

    🚨 CVE-2026-121455 DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to...

  • CVE-2026-121543

    🚨 CVE-2026-121543 smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user...

  • CVE-2026-121544

    🚨 CVE-2026-121544 Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows...

  • CVE-2026-121545

    🚨 CVE-2026-121545 Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEvent that allows...

  • CVE-2026-121546

    🚨 CVE-2026-121546 ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape...

  • CVE-2026-121547

    🚨 CVE-2026-121547 Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control...

  • CVE-2026-121548

    🚨 CVE-2026-121548 Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute...

  • CVE-2026-121549

    🚨 CVE-2026-121549 nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to...

  • CVE-2026-121550

    🚨 CVE-2026-121550 nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main()...

  • CVE-2026-121551

    🚨 CVE-2026-121551 PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to...

  • CVE-2026-121552

    🚨 CVE-2026-121552 Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler that...

  • CVE-2026-121553

    🚨 CVE-2026-121553 Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowing attackers to...

Статистика статей

Статьи
53,092
Просмотры
269,975
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху