CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-124437

    🚨 CVE-2026-124437 Scriban before 7.5.3 contains a resource exhaustion vulnerability that allows untrusted template authors to exhaust memory and...

  • CVE-2026-124439

    🚨 CVE-2026-124439 Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains...

  • CVE-2026-124440

    🚨 CVE-2026-124440 Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows...

  • CVE-2026-124441

    🚨 CVE-2026-124441 Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource...

  • CVE-2026-124442

    🚨 CVE-2026-124442 AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows users with station WebHooks permission...

  • CVE-2026-124443

    🚨 CVE-2026-124443 Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File list and report...

  • CVE-2026-124444

    🚨 CVE-2026-124444 OpenEMR before 8.4.0 contains a mass assignment vulnerability in the patient portal OnsiteDocument query API that lets request...

  • CVE-2026-124445

    🚨 CVE-2026-124445 OpenEMR from 7.0.1 before 8.4.0 contains a flaw in src/Common/Auth/OneTimeAuth.php that ignores the enforce_onetime_use and...

  • CVE-2026-124446

    🚨 CVE-2026-124446 OpenEMR before 8.3.0 contains a path traversal vulnerability in the FaxSMS module's RCFaxClient and SignalWireClient...

  • CVE-2026-124447

    🚨 CVE-2026-124447 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsitePortalActivityController::Update() that...

  • CVE-2026-124448

    🚨 CVE-2026-124448 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the CCDA/CCD preview stylesheets, where cda.xsl...

  • CVE-2026-124449

    🚨 CVE-2026-124449 OpenEMR before 8.4.0 contains a missing authorization vulnerability in FHIR Media/:uuid and QuestionnaireResponse read routes...

  • CVE-2026-124450

    🚨 CVE-2026-124450 OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument...

  • CVE-2026-124451

    🚨 CVE-2026-124451 OpenEMR before 8.4.0 contains an authorization bypass vulnerability in its SMART on FHIR implementation because...

  • CVE-2026-124452

    🚨 CVE-2026-124452 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in interface/forms/eye_mag/report.php that allows...

  • CVE-2026-124453

    🚨 CVE-2026-124453 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows...

  • CVE-2026-124455

    🚨 CVE-2026-124455 OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in OnsiteDocumentController::Query() that allows...

  • CVE-2026-124456

    🚨 CVE-2026-124456 OpenEMR before 8.3.0 contains missing authorization and insecure direct object reference vulnerabilities in the...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху