CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121429

    🚨 CVE-2026-121429 AzuraCast through 0.23.8 contains a command injection vulnerability that allows station users with Profile permission to execute...

  • CVE-2026-121430

    🚨 CVE-2026-121430 AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST...

  • CVE-2026-121431

    🚨 CVE-2026-121431 AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission...

  • CVE-2026-121432

    🚨 CVE-2026-121432 AzuraCast before 0.24.0 contains a CRLF injection vulnerability that allows low-privilege station users to inject playlist...

  • CVE-2026-121433

    🚨 CVE-2026-121433 AzuraCast before 0.24.0 contains a stored CSV formula injection vulnerability that allows station users with Media permission to...

  • CVE-2026-121434

    🚨 CVE-2026-121434 Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certificates.add and Certificates.update API commands...

  • CVE-2026-121435

    🚨 CVE-2026-121435 Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to create MySQL...

  • CVE-2026-121436

    🚨 CVE-2026-121436 Froxlor from 2.3.8 before 2.3.15 contains an information disclosure vulnerability that allows administrators with...

  • CVE-2026-121438

    🚨 CVE-2026-121438 Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attackers to cause...

  • CVE-2026-121439

    🚨 CVE-2026-121439 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that allows...

  • CVE-2026-121440

    🚨 CVE-2026-121440 Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 fails to check forwarded trailers against the...

  • CVE-2026-121441

    🚨 CVE-2026-121441 Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in wasi-http...

  • CVE-2026-121442

    🚨 CVE-2026-121442 Frappe HRMS before 15.61.0 contains a permission bypass vulnerability that allows authenticated employees to view other...

  • CVE-2026-121443

    🚨 CVE-2026-121443 svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests...

  • CVE-2026-121444

    🚨 CVE-2026-121444 svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop()...

  • CVE-2026-121445

    🚨 CVE-2026-121445 darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerability in the image-set...

  • CVE-2026-121446

    🚨 CVE-2026-121446 svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL...

  • CVE-2026-121447

    🚨 CVE-2026-121447 svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing...

Статистика статей

Статьи
53,092
Просмотры
271,010
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху