CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-120309

    🚨 CVE-2026-120309 Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that lets...

  • CVE-2026-120315

    🚨 CVE-2026-120315 LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write...

  • CVE-2026-103310

    🚨 CVE-2026-103310 The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications...

  • CVE-2026-92886

    🚨 CVE-2026-92886 Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege...

  • CVE-2026-120463

    🚨 CVE-2026-120463 Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an...

  • CVE-2026-74993

    🚨 CVE-2026-74993 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and...

  • CVE-2026-120318

    🚨 CVE-2026-120318 Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization...

  • CVE-2026-120425

    🚨 CVE-2026-120425 Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows...

  • CVE-2026-120426

    🚨 CVE-2026-120426 OpenCSG CSGHub through v2.6.0-ce contains an authorization bypass vulnerability in the unauthenticated file resolve route that...

  • CVE-2026-120428

    🚨 CVE-2026-120428 PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to...

  • CVE-2026-120438

    🚨 CVE-2026-120438 QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap...

  • CVE-2026-120439

    🚨 CVE-2026-120439 QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a...

  • CVE-2026-120440

    🚨 CVE-2026-120440 QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the...

  • CVE-2026-120441

    🚨 CVE-2026-120441 OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows...

  • CVE-2026-120442

    🚨 CVE-2026-120442 ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-120443

    🚨 CVE-2026-120443 GoFound through 1.4.1 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject...

  • CVE-2026-120444

    🚨 CVE-2026-120444 GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary...

  • CVE-2026-120445

    🚨 CVE-2026-120445 madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows...

Статистика статей

Статьи
53,092
Просмотры
275,465
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху