CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-118576

    🚨 CVE-2026-118576 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Stage File Proxy...

  • CVE-2026-118582

    🚨 CVE-2026-118582 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass. This issue...

  • CVE-2026-118583

    🚨 CVE-2026-118583 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions...

  • CVE-2026-118584

    🚨 CVE-2026-118584 Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions...

  • CVE-2026-96389

    🚨 CVE-2026-96389 Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from...

  • CVE-2026-109821

    🚨 CVE-2026-109821 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker...

  • CVE-2026-115274

    🚨 CVE-2026-115274 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an...

  • CVE-2026-97209

    🚨 CVE-2026-97209 Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a...

  • CVE-2025-31704

    🚨 CVE-2025-31704 A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted...

  • CVE-2026-116366

    🚨 CVE-2026-116366 An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with...

  • CVE-2026-22105

    🚨 CVE-2026-22105 Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device...

  • CVE-2026-22109

    🚨 CVE-2026-22109 The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are...

  • CVE-2026-22110

    🚨 CVE-2026-22110 The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing...

  • CVE-2026-22114

    🚨 CVE-2026-22114 HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.

  • CVE-2026-85268

    🚨 CVE-2026-85268 A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase...

  • CVE-2026-110970

    🚨 CVE-2026-110970 Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a...

  • CVE-2026-110970

    🚨 CVE-2026-110971 Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it...

  • CVE-2026-110970

    🚨 CVE-2026-110972 Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server...

Статистика статей

Статьи
53,098
Просмотры
286,096
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху