CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-62303

    🚨 CVE-2026-62303 Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResource()` in...

  • CVE-2026-62331

    🚨 CVE-2026-62331 praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI...

  • CVE-2026-73186

    🚨 CVE-2026-73186 Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

  • CVE-2026-73322

    🚨 CVE-2026-73322 Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled...

  • CVE-2026-78527

    🚨 CVE-2026-78527 Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

  • CVE-2026-7003

    🚨 CVE-2026-7003 WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover...

  • CVE-2026-7003

    🚨 CVE-2026-7004 WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows...

  • CVE-2026-7003

    🚨 CVE-2026-7005 WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to...

  • CVE-2026-90888

    🚨 CVE-2026-90888 Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.

  • CVE-2026-94175

    🚨 CVE-2026-94175 Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

  • CVE-2023-7357

    🚨 CVE-2023-7357 A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability...

  • CVE-2025-12523

    🚨 CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

  • CVE-2026-107043

    🚨 CVE-2026-107043 Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's...

  • CVE-2026-107044

    🚨 CVE-2026-107044 Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate...

  • CVE-2026-107045

    🚨 CVE-2026-107045 Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to...

  • CVE-2026-107046

    🚨 CVE-2026-107046 A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers...

  • CVE-2026-107047

    🚨 CVE-2026-107047 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's...

  • CVE-2026-107048

    🚨 CVE-2026-107048 An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute...

Статистика статей

Статьи
53,101
Просмотры
286,096
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху