CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105601

    🚨 CVE-2026-105601 Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5

  • CVE-2026-105602

    🚨 CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

  • CVE-2026-110535

    🚨 CVE-2026-110535 Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure...

  • CVE-2026-113511

    🚨 CVE-2026-113511 Authorization bypass through User-Controlled key vulnerability in Apache Syncope. A delegated administrator can relocate a...

  • CVE-2026-113687

    🚨 CVE-2026-113687 Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for...

  • CVE-2026-114364

    🚨 CVE-2026-114364 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. This...

  • CVE-2025-62819

    🚨 CVE-2025-62819 Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA...

  • CVE-2026-120425

    🚨 CVE-2026-120425 Chatify before 1.6.4 contains an authorization bypass vulnerability in the Pusher channel authorization endpoint that allows...

  • CVE-2026-120429

    🚨 CVE-2026-120429 Camaleon CMS before 2.9.2 contains a missing authorization vulnerability in Admin::MediaController that allows low-privileged...

  • CVE-2026-120433

    🚨 CVE-2026-120433 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the picttoppm...

  • CVE-2026-120437

    🚨 CVE-2026-120437 Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an out-of-bounds read vulnerability in the...

  • CVE-2026-120441

    🚨 CVE-2026-120441 OwnTone Server through 29.3 contains an sql injection vulnerability in mpd_sticker_find() in src/mpd.c that allows...

  • CVE-2026-120445

    🚨 CVE-2026-120445 madong-admin-saas through 5.1.4 contains an incorrect authorization vulnerability in AccessTokenMiddleware that allows...

  • CVE-2026-120449

    🚨 CVE-2026-120449 Outline before 1.12.0 contains an improper access control vulnerability that allows unauthenticated users to read unpublished...

  • CVE-2026-120453

    🚨 CVE-2026-120453 The Sleuth Kit through 4.15.0 contains a heap out-of-bounds read vulnerability in hfs_load_extended_attrs() in tsk/fs/hfs.c that...

  • CVE-2026-120457

    🚨 CVE-2026-120457 libaec through 1.1.7 contains an out-of-bounds read vulnerability in m_se_decode() in src/decode.c that allows attackers to...

  • CVE-2026-120461

    🚨 CVE-2026-120461 Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command...

  • CVE-2026-120491

    🚨 CVE-2026-120491 Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to...

Статистика статей

Статьи
53,092
Просмотры
278,672
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху