CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112347

    🚨 CVE-2026-112347 Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API, where...

  • CVE-2026-112348

    🚨 CVE-2026-112348 Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers to...

  • CVE-2026-115683

    🚨 CVE-2026-115683 A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the...

  • CVE-2026-117028

    🚨 CVE-2026-117028 Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult...

  • CVE-2026-117350

    🚨 CVE-2026-117350 Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

  • CVE-2026-119596

    🚨 CVE-2026-119596 UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated...

  • CVE-2026-119597

    🚨 CVE-2026-119597 OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge...

  • CVE-2026-119598

    🚨 CVE-2026-119598 Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs that...

  • CVE-2026-119599

    🚨 CVE-2026-119599 AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level...

  • CVE-2026-86715

    🚨 CVE-2026-86715 Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP...

  • CVE-2010-20125

    🚨 CVE-2010-20125 DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers...

  • CVE-2026-117346

    🚨 CVE-2026-117346 Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

  • CVE-2026-119645

    🚨 CVE-2026-119645 ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated users to...

  • CVE-2026-119646

    🚨 CVE-2026-119646 Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites'...

  • CVE-2026-119648

    🚨 CVE-2026-119648 Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to...

  • CVE-2026-119649

    🚨 CVE-2026-119649 Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in...

  • CVE-2026-119650

    🚨 CVE-2026-119650 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in PrivacyController that allows...

  • CVE-2026-119651

    🚨 CVE-2026-119651 HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FeedController.delFeed that allows...

Статистика статей

Статьи
53,098
Просмотры
285,550
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху