CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-119727

    🚨 CVE-2026-119727 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing...

  • CVE-2026-119728

    🚨 CVE-2026-119728 A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with...

  • CVE-2026-119729

    🚨 CVE-2026-119729 A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a...

  • CVE-2026-119842

    🚨 CVE-2026-119842 A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file...

  • CVE-2026-120007

    🚨 CVE-2026-120007 NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other...

  • CVE-2026-120046

    🚨 CVE-2026-120046 Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows...

  • CVE-2026-27061

    🚨 CVE-2026-27061 Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

  • CVE-2026-28160

    🚨 CVE-2026-28160 Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

  • CVE-2026-39732

    🚨 CVE-2026-39732 Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.

  • CVE-2026-39734

    🚨 CVE-2026-39734 Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.

  • CVE-2026-39738

    🚨 CVE-2026-39738 Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.

  • CVE-2026-39739

    🚨 CVE-2026-39739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate...

  • CVE-2026-39786

    🚨 CVE-2026-39786 Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.

  • CVE-2026-46560

    🚨 CVE-2026-46560 Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an...

  • CVE-2026-48201

    🚨 CVE-2026-48201 Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.

  • CVE-2026-52710

    🚨 CVE-2026-52710 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#8211; Free...

  • CVE-2026-54854

    🚨 CVE-2026-54854 Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.

  • CVE-2026-54855

    🚨 CVE-2026-54855 Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions.

Статистика статей

Статьи
53,101
Просмотры
286,096
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху