CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-63224

    🚨 CVE-2026-63224 OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV crosstab`...

  • CVE-2026-1933

    🚨 CVE-2026-1933 A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...

  • CVE-2026-14474

    🚨 CVE-2026-14474 A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches...

  • CVE-2026-14476

    🚨 CVE-2026-14476 A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize ...

  • CVE-2026-97229

    🚨 CVE-2026-97229 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4...

  • CVE-2026-118764

    🚨 CVE-2026-118764 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1...

  • CVE-2026-107868

    🚨 CVE-2026-107868 Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.

  • CVE-2026-116401

    🚨 CVE-2026-116401 Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

  • CVE-2026-116852

    🚨 CVE-2026-116852 Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

  • CVE-2026-118086

    🚨 CVE-2026-118086 Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.

  • CVE-2026-119842

    🚨 CVE-2026-119842 A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file...

  • CVE-2026-28160

    🚨 CVE-2026-28160 Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

  • CVE-2026-48201

    🚨 CVE-2026-48201 Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

  • CVE-2026-61840

    🚨 CVE-2026-61840 Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates a...

  • CVE-2026-61847

    🚨 CVE-2026-61847 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the...

  • CVE-2026-62162

    🚨 CVE-2026-62162 Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak`...

  • CVE-2026-62298

    🚨 CVE-2026-62298 mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and...

  • CVE-2026-78527

    🚨 CVE-2026-78527 Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху