CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-104063

    🚨 CVE-2026-104063 Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding...

  • CVE-2026-104064

    🚨 CVE-2026-104064 Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to...

  • CVE-2026-104065

    🚨 CVE-2026-104065 Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an...

  • CVE-2026-104066

    🚨 CVE-2026-104066 Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking...

  • CVE-2026-104067

    🚨 CVE-2026-104067 Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap...

  • CVE-2026-105454

    🚨 CVE-2026-105454 RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted...

  • CVE-2026-105454

    🚨 CVE-2026-105455 RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a...

  • CVE-2026-105454

    🚨 CVE-2026-105456 RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely...

  • CVE-2026-117182

    🚨 CVE-2026-117182 An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows...

  • CVE-2026-117183

    🚨 CVE-2026-117183 A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the...

  • CVE-2026-117184

    🚨 CVE-2026-117184 An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST...

  • CVE-2026-119699

    🚨 CVE-2026-119699 WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows unauthenticated...

  • CVE-2026-119700

    🚨 CVE-2026-119700 WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated attackers to determine...

  • CVE-2026-119701

    🚨 CVE-2026-119701 WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers to flood password...

  • CVE-2026-119702

    🚨 CVE-2026-119702 WPGraphQL before 2.24.1 contains a missing authorization vulnerability in the createComment mutation that allows unauthenticated...

  • CVE-2026-119703

    🚨 CVE-2026-119703 xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allows...

  • CVE-2026-119705

    🚨 CVE-2026-119705 SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated...

  • CVE-2026-119707

    🚨 CVE-2026-119707 SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that...

Статистика статей

Статьи
53,098
Просмотры
285,550
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху