CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-123616

    🚨 CVE-2026-123616 imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate...

  • CVE-2026-124422

    🚨 CVE-2026-124422 SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds iframes...

  • CVE-2026-123158

    🚨 CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication...

  • CVE-2026-114713

    🚨 CVE-2026-114713 The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it...

  • CVE-2024-28835

    🚨 CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem...

  • CVE-2024-28834

    🚨 CVE-2024-28834 A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems...

  • CVE-2026-103303

    🚨 CVE-2026-103303 The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when saving its...

  • CVE-2026-104639

    🚨 CVE-2026-104639 The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook...

  • CVE-2026-104307

    🚨 CVE-2026-104307 The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup...

  • CVE-2026-104338

    🚨 CVE-2026-104338 The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST routes and...

  • CVE-2026-106015

    🚨 CVE-2026-106015 The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the...

  • CVE-2026-109925

    🚨 CVE-2026-109925 The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL...

  • CVE-2026-110132

    🚨 CVE-2026-110132 The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post...

  • CVE-2026-110963

    🚨 CVE-2026-110963 The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to...

  • CVE-2026-114432

    🚨 CVE-2026-114432 The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file...

  • CVE-2026-122060

    🚨 CVE-2026-122060 The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected...

  • CVE-2026-122062

    🚨 CVE-2026-122062 The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict...

  • CVE-2026-122085

    🚨 CVE-2026-122085 The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on...

Статистика статей

Статьи
53,082
Просмотры
218,839
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху