CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73695

    🚨 CVE-2026-73695 Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that...

  • CVE-2026-73696

    🚨 CVE-2026-73696 Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel...

  • CVE-2026-73697

    🚨 CVE-2026-73697 Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in...

  • CVE-2026-104080

    🚨 CVE-2026-104080 Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API...

  • CVE-2026-109141

    🚨 CVE-2026-109141 The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that...

  • CVE-2026-109142

    🚨 CVE-2026-109142 When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492...

  • CVE-2026-114408

    🚨 CVE-2026-114408 In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet...

  • CVE-2026-115653

    🚨 CVE-2026-115653 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted...

  • CVE-2026-115654

    🚨 CVE-2026-115654 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread...

  • CVE-2026-120500

    🚨 CVE-2026-120500 An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that allows...

  • CVE-2026-120501

    🚨 CVE-2026-120501 An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who...

  • CVE-2026-16306

    🚨 CVE-2026-16306 Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote...

  • CVE-2026-2102

    🚨 CVE-2026-2102 wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The...

  • CVE-2026-77876

    🚨 CVE-2026-77876 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory...

  • CVE-2026-77877

    🚨 CVE-2026-77877 Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows attackers able...

  • CVE-2026-77878

    🚨 CVE-2026-77878 Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API database...

  • CVE-2026-77879

    🚨 CVE-2026-77879 Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication...

  • CVE-2026-77880

    🚨 CVE-2026-77880 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password...

Статистика статей

Статьи
53,092
Просмотры
278,672
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху