CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119709

    🚨 CVE-2026-119709 Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST...

  • CVE-2026-119710

    🚨 CVE-2026-119710 PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the...

  • CVE-2026-119711

    🚨 CVE-2026-119711 PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to...

  • CVE-2026-119712

    🚨 CVE-2026-119712 PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows...

  • CVE-2026-119713

    🚨 CVE-2026-119713 Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set...

  • CVE-2026-119714

    🚨 CVE-2026-119714 My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated...

  • CVE-2026-119715

    🚨 CVE-2026-119715 NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface...

  • CVE-2026-119716

    🚨 CVE-2026-119716 pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute...

  • CVE-2026-119717

    🚨 CVE-2026-119717 pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python...

  • CVE-2025-49602

    🚨 CVE-2025-49602 An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid...

  • CVE-2026-115642

    🚨 CVE-2026-115642 In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession...

  • CVE-2026-119116

    🚨 CVE-2026-119116 A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS...

  • CVE-2026-119148

    🚨 CVE-2026-119148 Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS...

  • CVE-2026-119298

    🚨 CVE-2026-119298 croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the...

  • CVE-2026-119299

    🚨 CVE-2026-119299 gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes...

  • CVE-2026-37468

    🚨 CVE-2026-37468 Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via...

  • CVE-2026-39375

    🚨 CVE-2026-39375 Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.0...

  • CVE-2026-50000

    🚨 CVE-2026-50000 SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from...

Статистика статей

Статьи
53,098
Просмотры
285,550
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху