CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120446

    🚨 CVE-2026-120446 madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because...

  • CVE-2026-120447

    🚨 CVE-2026-120447 HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS...

  • CVE-2026-120448

    🚨 CVE-2026-120448 DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint that allows...

  • CVE-2026-120449

    🚨 CVE-2026-120449 Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpublished...

  • CVE-2026-120451

    🚨 CVE-2026-120451 libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow...

  • CVE-2026-120452

    🚨 CVE-2026-120452 libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows...

  • CVE-2026-120453

    🚨 CVE-2026-120453 The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfs.c that...

  • CVE-2026-120454

    🚨 CVE-2026-120454 The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that allows...

  • CVE-2026-120458

    🚨 CVE-2026-120458 Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows attackers to hang...

  • CVE-2026-120489

    🚨 CVE-2026-120489 Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticated...

  • CVE-2026-120491

    🚨 CVE-2026-120491 Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to...

  • CVE-2026-73695

    🚨 CVE-2026-73695 Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that...

  • CVE-2026-73696

    🚨 CVE-2026-73696 Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel...

  • CVE-2026-73697

    🚨 CVE-2026-73697 Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in...

  • CVE-2026-104080

    🚨 CVE-2026-104080 Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API...

  • CVE-2026-109140

    🚨 CVE-2026-109140 The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every...

  • CVE-2026-109141

    🚨 CVE-2026-109141 The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that...

  • CVE-2026-109142

    🚨 CVE-2026-109142 When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492...

Статистика статей

Статьи
53,092
Просмотры
275,465
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху