CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118266

    🚨 CVE-2026-118266 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a safe HTTP method as the...

  • CVE-2026-118652

    🚨 CVE-2026-118652 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP and Context.JSONPBlob concatenate an unvalidated callback...

  • CVE-2026-61542

    🚨 CVE-2026-61542 Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the...

  • CVE-2026-118657

    🚨 CVE-2026-118657 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any...

  • CVE-2026-118661

    🚨 CVE-2026-118661 Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy DOM's...

  • CVE-2026-118665

    🚨 CVE-2026-118665 GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GraphQL...

  • CVE-2026-118537

    🚨 CVE-2026-118537 A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file...

  • CVE-2026-118669

    🚨 CVE-2026-118669 OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and...

  • CVE-2026-118693

    🚨 CVE-2026-118693 CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts...

  • CVE-2026-118754

    🚨 CVE-2026-118754 Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that allows...

  • CVE-2026-118803

    🚨 CVE-2026-118803 Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous...

  • CVE-2026-54453

    🚨 CVE-2026-54453 OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to version...

  • CVE-2026-61564

    🚨 CVE-2026-61564 AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.php`...

  • CVE-2026-118578

    🚨 CVE-2026-118578 A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function...

  • CVE-2026-75520

    🚨 CVE-2026-75520 Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the...

  • CVE-2026-118586

    🚨 CVE-2026-118586 A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file...

  • CVE-2026-51903

    🚨 CVE-2026-51903 SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in...

  • CVE-2026-119573

    🚨 CVE-2026-119573 Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the...

Статистика статей

Статьи
53,092
Просмотры
272,279
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху