CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114711

    🚨 CVE-2026-114711 Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions.

  • CVE-2026-115604

    🚨 CVE-2026-115604 Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.

  • CVE-2026-115947

    🚨 CVE-2026-115947 Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.

  • CVE-2026-116386

    🚨 CVE-2026-116386 Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.

  • CVE-2026-116401

    🚨 CVE-2026-116401 Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

  • CVE-2026-116405

    🚨 CVE-2026-116405 Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

  • CVE-2026-116410

    🚨 CVE-2026-116410 Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

  • CVE-2026-116847

    🚨 CVE-2026-116847 Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.

  • CVE-2026-116851

    🚨 CVE-2026-116851 Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.

  • CVE-2026-116852

    🚨 CVE-2026-116852 Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.

  • CVE-2026-116853

    🚨 CVE-2026-116853 Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.

  • CVE-2026-116854

    🚨 CVE-2026-116854 Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.

  • CVE-2026-116861

    🚨 CVE-2026-116861 Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.

  • CVE-2026-116862

    🚨 CVE-2026-116862 Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.

  • CVE-2026-118089

    🚨 CVE-2026-118089 Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.

  • CVE-2026-118090

    🚨 CVE-2026-118090 Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.

  • CVE-2026-119117

    🚨 CVE-2026-119117 Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's...

  • CVE-2026-119526

    🚨 CVE-2026-119526 Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху