CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119652

    🚨 CVE-2026-119652 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allows...

  • CVE-2026-119653

    🚨 CVE-2026-119653 Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list host...

  • CVE-2026-119658

    🚨 CVE-2026-119658 PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to...

  • CVE-2026-119659

    🚨 CVE-2026-119659 Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users'...

  • CVE-2026-119660

    🚨 CVE-2026-119660 MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin...

  • CVE-2026-119661

    🚨 CVE-2026-119661 ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks...

  • CVE-2026-119662

    🚨 CVE-2026-119662 Songloft 2.9.0 before 2.13.6 contains a hardcoded credentials vulnerability that allows adjacent network attackers to...

  • CVE-2026-119663

    🚨 CVE-2026-119663 Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API...

  • CVE-2026-119664

    🚨 CVE-2026-119664 Tamery (formerly Conar) 0.26.1 before 0.99.0 contains an authorization bypass vulnerability in the cloud sync API...

  • CVE-2026-119680

    🚨 CVE-2026-119680 A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper...

  • CVE-2026-119682

    🚨 CVE-2026-119682 An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine...

  • CVE-2026-46499

    🚨 CVE-2026-46499 Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, several...

  • CVE-2026-48164

    🚨 CVE-2026-48164 Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the...

  • CVE-2026-61626

    🚨 CVE-2026-61626 libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4...

  • CVE-2026-61737

    🚨 CVE-2026-61737 ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits...

  • CVE-2026-93327

    🚨 CVE-2026-93327 A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior...

  • CVE-2026-104061

    🚨 CVE-2026-104061 Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked PSD...

  • CVE-2026-104062

    🚨 CVE-2026-104062 Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows...

Статистика статей

Статьи
53,098
Просмотры
285,550
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху