Мониторинг Все уязвимости
Открытые данные
СИТУАЦИОННЫЙ ОБЗОР

Все уязвимости

Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.

Лента уязвимостей

30
↵
УЯЗВИМОСТЬ / ПРОДУКТПРИОРИТЕТCVSSEPSSСИГНАЛЫОПУБЛИКОВАНАКарточка
CVE-2026-116050
krupalshah Employee Recruitment System Registration registerform3.php sql injection
krupalshah / Employee Recruitment System
Высокий6.9
0,25 %
PoC
25.10.2026
CVE-2026-115997
pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection
pig-mesh / pig
Высокий5.3
0,23 %
PoCПатч
25.10.2026
CVE-2026-115969
Travisun Opptrix Schedule API setup command injection
Travisun / Opptrix
Высокий6.9
1,34 %
PoC
24.10.2026
CVE-2026-116062
SourceCodester Performance Indicator System save_profile.php sql injection
SourceCodester / Performance Indicator System
Высокий6.9
0,27 %
PoC
25.10.2026
CVE-2026-116058
Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection
Alfresco / Activiti
Средний5.3
0,38 %
25.10.2026
CVE-2026-116055
SourceCodester Performance Indicator System deleteproduct.php sql injection
SourceCodester / Performance Indicator System
Высокий5.3
0,32 %
PoC
25.10.2026
CVE-2026-88094
Azure Storage Library Elevation of Privilege Vulnerability
Microsoft / azure-storage-blob-batch · Microsoft / Microsoft Edge (Chromium-based)
Высокий8.1
0,82 %
Патч
13.10.2026
CVE-2026-116048
krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection
krupalshah / EmployeeRecruitmentSystem
Высокий6.9
0,25 %
PoC
25.10.2026
CVE-2026-115999
mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection
mansi-k / Restaurant_IMS
Средний6.9
0,26 %
25.10.2026
CVE-2026-115970
Travisun Opptrix Import Endpoint import code injection
Travisun / Opptrix
Высокий6.9
0,3 %
PoC
24.10.2026
CVE-2023-26142
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input
crowcpp / crow
Высокий6.1
—
PoC
12.09.2023
CVE-2026-118258
i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string
i18next / i18next-http-backend · i18next-http-backend
Низкий3.7
—
Патч
28.10.2026
CVE-2026-57209
Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
dadrus / heimdall
Критический7.0
0,34 %
PoC
23.10.2026
CVE-2026-115730
i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl
i18next / i18next-http-backend · i18next-http-backend
Средний2.3
0,22 %
PoCПатч
23.10.2026
CVE-2026-103400
Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
Juniper Networks / Session Smart Router · Juniper Networks / Session Smart Conductor
Средний5.5
—
28.10.2026
CVE-2026-54453
OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
opencats / OpenCATS
Высокий7.2
—
29.10.2026
CVE-2026-41109
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Microsoft / Visual Studio Code · microsoft / visual_studio_code
Высокий8.8
0,86 %
Патч
12.05.2026
CVE-2026-114575
TOTOLINK A950RG product.so UploadCustomModule command injection
TOTOLINK / A950RG
Критический10.0
2,21 %
PoC
22.10.2026
CVE-2026-114440
oretnom23 php-travel-agency-system delete.php sql injection
oretnom23 / php-travel-agency-system
Высокий6.9
0,34 %
PoC
22.10.2026
CVE-2026-114380
itsourcecode Online Cake Ordering System inserttrans.php sql injection
itsourcecode / Online Cake Ordering System
Высокий5.3
0,21 %
PoC
22.10.2026
CVE-2023-7331
A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b
Продукт уточняется
Средний5.1
0,24 %
01.01.2026
CVE-2026-103405
Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting
Juniper Networks / Session Smart Router · Juniper Networks / Session Smart Conductor
Средний5.8
—
28.10.2026
CVE-2026-106648
Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes
Unknown / Royal Elementor Addons
Высокий5.3
—
PoC
28.10.2026
CVE-2026-114265
ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection
ProjectWorlds / Advanced Library Management System
Высокий5.3
0,25 %
PoC
21.10.2026
CVE-2026-117515
oretnom23 php-travel-agency-system traceapplication.php sql injection
oretnom23 / php-travel-agency-system
Высокий6.9
0,41 %
PoC
27.10.2026
CVE-2026-114256
oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection
oretnom23 / file-management-system-php
Высокий6.9
0,28 %
PoC
21.10.2026
CVE-2026-114250
itsourcecode Sales-and-Inventory-System cust_edit.php sql injection
itsourcecode / Sales-and-Inventory-System
Высокий5.3
0,21 %
PoC
21.10.2026
CVE-2026-114243
dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
dhikshitha29 / Insurance-Management-System
Высокий6.9
0,33 %
PoC
21.10.2026
CVE-2026-41573
OpenAM LDAP Injection via `_queryId` Parameter
OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-core-rest
Высокий7.1
0,5 %
Патч
15.09.2026
CVE-2026-117526
reduxjs redux-devtools Remotedev Server evalAction code injection
reduxjs / redux-devtools
Высокий4.8
0,14 %
PoC
27.10.2026
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.