CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124476

    🚨 CVE-2026-124476 OpenEMR before 8.3.0 contains an insecure direct object reference in portal/lib/paylib.php, which writes the request-supplied...

  • CVE-2026-124477

    🚨 CVE-2026-124477 OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete...

  • CVE-2026-124478

    🚨 CVE-2026-124478 OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of /interface/main/messages/save.php...

  • CVE-2026-124479

    🚨 CVE-2026-124479 OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document download, where the controller passes...

  • CVE-2026-124480

    🚨 CVE-2026-124480 OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read...

  • CVE-2026-124482

    🚨 CVE-2026-124482 OpenEMR before 8.4.0 contains an authorization bypass allowing low-privileged SMART standalone-launch users to bind arbitrary...

  • CVE-2026-124483

    🚨 CVE-2026-124483 OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the...

  • CVE-2026-124484

    🚨 CVE-2026-124484 OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any authenticated...

  • CVE-2026-124485

    🚨 CVE-2026-124485 OpenEMR before 8.3.0 contains an authorization bypass vulnerability in the patient portal onsitedocuments API that allows...

  • CVE-2026-124486

    🚨 CVE-2026-124486 OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic document controller that allows low-privilege...

  • CVE-2026-124487

    🚨 CVE-2026-124487 OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST /fhir/DocumentReference/$docref...

  • CVE-2026-124488

    🚨 CVE-2026-124488 OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking...

  • CVE-2026-124489

    🚨 CVE-2026-124489 OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payment.php that allows low-privilege...

  • CVE-2026-124490

    🚨 CVE-2026-124490 OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of...

  • CVE-2026-124491

    🚨 CVE-2026-124491 SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that...

  • CVE-2026-124492

    🚨 CVE-2026-124492 SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which...

  • CVE-2026-124493

    🚨 CVE-2026-124493 SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header...

  • CVE-2026-124494

    🚨 CVE-2026-124494 SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer's _normalizeURL()...

Статистика статей

Статьи
53,082
Просмотры
216,320
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху