CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-28160

    🚨 CVE-2026-28160 Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

  • CVE-2026-39732

    🚨 CVE-2026-39732 Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.

  • CVE-2026-39734

    🚨 CVE-2026-39734 Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.

  • CVE-2026-39738

    🚨 CVE-2026-39738 Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.

  • CVE-2026-39786

    🚨 CVE-2026-39786 Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

  • CVE-2026-46560

    🚨 CVE-2026-46560 Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an...

  • CVE-2026-48201

    🚨 CVE-2026-48201 Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

  • CVE-2026-52710

    🚨 CVE-2026-52710 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#8211; Free...

  • CVE-2026-54850

    🚨 CVE-2026-54850 Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.

  • CVE-2026-54854

    🚨 CVE-2026-54854 Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.

  • CVE-2026-54855

    🚨 CVE-2026-54855 Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.

  • CVE-2026-59978

    🚨 CVE-2026-59978 AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated...

  • CVE-2026-61586

    🚨 CVE-2026-61586 Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory does not...

  • CVE-2026-61840

    🚨 CVE-2026-61840 Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates a...

  • CVE-2026-61845

    🚨 CVE-2026-61845 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts `CSS...

  • CVE-2026-61846

    🚨 CVE-2026-61846 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively...

  • CVE-2026-61847

    🚨 CVE-2026-61847 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the...

  • CVE-2026-61848

    🚨 CVE-2026-61848 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses...

Статистика статей

Статьи
53,098
Просмотры
285,550
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху