СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
10| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-107396 Indico: Cross-Site-Scripting in link fields indico / indico · indico | Средний | 5.4 | 0,2 % | 08.10.2026 | ||
| CVE-2026-71478 league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes thephpleague / commonmark | Высокий | 6.1 | 0,36 % | PoC | 06.08.2026 | |
| CVE-2024-23569 HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protectio HCLSoftware / Aftermarket EPC | Средний | 4.3 | 0,3 % | 17.07.2026 | ||
| CVE-2024-42214 HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. HCLSoftware / Aftermarket EPC | Средний | 5.3 | 0,33 % | 17.07.2026 | ||
| CVE-2026-15295 Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting dcooney / Ajax Load More – Infinite Scroll, Load More, & Lazy Load | Средний | 4.4 | 0,24 % | 10.07.2026 | ||
| CVE-2024-30924 Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary n/a / n/a · derbynet / derbynet | Средний | 4.6 | 0,34 % | 18.04.2024 | ||
| CVE-2025-20240 A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenti Cisco / Cisco IOS XE Software | Средний | 6.1 | 0,35 % | 24.09.2025 | ||
| CVE-2025-53904 The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability The-Scratch-Channel / the-scratch-channel.github.io | Низкий | 1.3 | 0,37 % | 16.07.2025 | ||
| CVE-2025-49590 CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability cryptpad / cryptpad | Низкий | 2.9 | 0,33 % | 19.06.2025 | ||
| CVE-2024-52305 UnoPim Stored XSS : Cookie hijacking through Create User function unopim / unopim | Средний | 6.5 | 0,2 % | 13.11.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.