CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-51905

    🚨 CVE-2026-51905 TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in...

  • CVE-2026-119168

    🚨 CVE-2026-119168 HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may...

  • CVE-2026-41216

    🚨 CVE-2026-41216 An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially...

  • CVE-2026-42057

    🚨 CVE-2026-42057 An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A...

  • CVE-2026-8822

    🚨 CVE-2026-8822 A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially...

  • CVE-2026-8824

    🚨 CVE-2026-8824 A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1)...

  • CVE-2026-9535

    🚨 CVE-2026-9535 A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially...

  • CVE-2026-119325

    🚨 CVE-2026-119325 Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the...

  • CVE-2026-119368

    🚨 CVE-2026-119368 Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting...

  • CVE-2026-119482

    🚨 CVE-2026-119482 Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access...

  • CVE-2026-93327

    🚨 CVE-2026-93327 A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior...

  • CVE-2026-105454

    🚨 CVE-2026-105454 RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted...

  • CVE-2026-105454

    🚨 CVE-2026-105455 RTIR's ticket creation forms show the subject of the related ticket when splitting a ticket or creating an incident from a...

  • CVE-2026-105454

    🚨 CVE-2026-105456 RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely...

  • CVE-2026-119479

    🚨 CVE-2026-119479 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder...

  • CVE-2026-62141

    🚨 CVE-2026-62141 Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access...

  • CVE-2026-112816

    🚨 CVE-2026-112816 Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11...

  • CVE-2026-119365

    🚨 CVE-2026-119365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player...

Статистика статей

Статьи
53,101
Просмотры
286,922
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху