CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114616

    🚨 CVE-2026-114616 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and...

  • CVE-2026-114622

    🚨 CVE-2026-114622 baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile...

  • CVE-2026-106763

    🚨 CVE-2026-106763 An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString...

  • CVE-2026-49442

    🚨 CVE-2026-49442 Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability...

  • CVE-2026-115569

    🚨 CVE-2026-115569 Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows...

  • CVE-2026-103299

    🚨 CVE-2026-103299 The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenticate...

  • CVE-2026-112677

    🚨 CVE-2026-112677 An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia...

  • CVE-2026-86954

    🚨 CVE-2026-86954 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27...

  • CVE-2026-115479

    🚨 CVE-2026-115479 baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor...

  • CVE-2026-118260

    🚨 CVE-2026-118260 Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies into...

  • CVE-2026-118264

    🚨 CVE-2026-118264 Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client...

  • CVE-2026-107249

    🚨 CVE-2026-107249 Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object...

  • CVE-2026-107250

    🚨 CVE-2026-107250 Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*.

  • CVE-2026-107251

    🚨 CVE-2026-107251 Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue...

  • CVE-2026-107252

    🚨 CVE-2026-107252 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: LaTeX for...

  • CVE-2026-107253

    🚨 CVE-2026-107253 Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*.

  • CVE-2026-107254

    🚨 CVE-2026-107254 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows...

  • CVE-2026-107257

    🚨 CVE-2026-107257 Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from...

Статистика статей

Статьи
53,098
Просмотры
285,102
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху