CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-63396

    🚨 CVE-2026-63396 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOrgs`...

  • CVE-2026-63398

    🚨 CVE-2026-63398 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolved the...

  • CVE-2026-63400

    🚨 CVE-2026-63400 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row...

  • CVE-2026-63401

    🚨 CVE-2026-63401 Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and...

  • CVE-2026-63410

    🚨 CVE-2026-63410 secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar...

  • CVE-2026-117656

    🚨 CVE-2026-117656 Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent...

  • CVE-2026-116755

    🚨 CVE-2026-116755 Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of SoftIron...

  • CVE-2026-118598

    🚨 CVE-2026-118598 A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only...

  • CVE-2026-118599

    🚨 CVE-2026-118599 A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In...

  • CVE-2026-102212

    🚨 CVE-2026-102212 Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server...

  • CVE-2026-120200

    🚨 CVE-2026-120200 Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resume...

  • CVE-2026-120202

    🚨 CVE-2026-120202 Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious...

  • CVE-2026-120203

    🚨 CVE-2026-120203 ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to...

  • CVE-2026-120204

    🚨 CVE-2026-120204 DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows remote...

  • CVE-2026-120205

    🚨 CVE-2026-120205 Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows...

  • CVE-2026-120206

    🚨 CVE-2026-120206 Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge...

  • CVE-2026-120207

    🚨 CVE-2026-120207 Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attackers to delete page...

  • CVE-2026-120209

    🚨 CVE-2026-120209 AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline...

Статистика статей

Статьи
53,092
Просмотры
276,402
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху