СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-116050 krupalshah Employee Recruitment System Registration registerform3.php sql injection krupalshah / Employee Recruitment System | Высокий | 6.9 | 0,25 % | PoC | 25.10.2026 | |
| CVE-2026-115997 pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection pig-mesh / pig | Высокий | 5.3 | 0,23 % | PoCПатч | 25.10.2026 | |
| CVE-2026-115969 Travisun Opptrix Schedule API setup command injection Travisun / Opptrix | Высокий | 6.9 | 1,34 % | PoC | 24.10.2026 | |
| CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection SourceCodester / Performance Indicator System | Высокий | 6.9 | 0,27 % | PoC | 25.10.2026 | |
| CVE-2026-116058 Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection Alfresco / Activiti | Средний | 5.3 | 0,38 % | 25.10.2026 | ||
| CVE-2026-116055 SourceCodester Performance Indicator System deleteproduct.php sql injection SourceCodester / Performance Indicator System | Высокий | 5.3 | 0,32 % | PoC | 25.10.2026 | |
| CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability Microsoft / azure-storage-blob-batch · Microsoft / Microsoft Edge (Chromium-based) | Высокий | 8.1 | 0,82 % | Патч | 13.10.2026 | |
| CVE-2026-116048 krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection krupalshah / EmployeeRecruitmentSystem | Высокий | 6.9 | 0,25 % | PoC | 25.10.2026 | |
| CVE-2026-115999 mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection mansi-k / Restaurant_IMS | Средний | 6.9 | 0,26 % | 25.10.2026 | ||
| CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection Travisun / Opptrix | Высокий | 6.9 | 0,3 % | PoC | 24.10.2026 | |
| CVE-2023-26142 All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input crowcpp / crow | Высокий | 6.1 | — | PoC | 12.09.2023 | |
| CVE-2026-118258 i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string i18next / i18next-http-backend · i18next-http-backend | Низкий | 3.7 | — | Патч | 28.10.2026 | |
| CVE-2026-57209 Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode dadrus / heimdall | Критический | 7.0 | 0,34 % | PoC | 23.10.2026 | |
| CVE-2026-115730 i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl i18next / i18next-http-backend · i18next-http-backend | Средний | 2.3 | 0,22 % | PoCПатч | 23.10.2026 | |
| CVE-2026-103400 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup Juniper Networks / Session Smart Router · Juniper Networks / Session Smart Conductor | Средний | 5.5 | — | 28.10.2026 | ||
| CVE-2026-54453 OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional) opencats / OpenCATS | Высокий | 7.2 | — | 29.10.2026 | ||
| CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Microsoft / Visual Studio Code · microsoft / visual_studio_code | Высокий | 8.8 | 0,86 % | Патч | 12.05.2026 | |
| CVE-2026-114575 TOTOLINK A950RG product.so UploadCustomModule command injection TOTOLINK / A950RG | Критический | 10.0 | 2,21 % | PoC | 22.10.2026 | |
| CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection oretnom23 / php-travel-agency-system | Высокий | 6.9 | 0,34 % | PoC | 22.10.2026 | |
| CVE-2026-114380 itsourcecode Online Cake Ordering System inserttrans.php sql injection itsourcecode / Online Cake Ordering System | Высокий | 5.3 | 0,21 % | PoC | 22.10.2026 | |
| CVE-2023-7331 A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b Продукт уточняется | Средний | 5.1 | 0,24 % | 01.01.2026 | ||
| CVE-2026-103405 Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting Juniper Networks / Session Smart Router · Juniper Networks / Session Smart Conductor | Средний | 5.8 | — | 28.10.2026 | ||
| CVE-2026-106648 Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes Unknown / Royal Elementor Addons | Высокий | 5.3 | — | PoC | 28.10.2026 | |
| CVE-2026-114265 ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection ProjectWorlds / Advanced Library Management System | Высокий | 5.3 | 0,25 % | PoC | 21.10.2026 | |
| CVE-2026-117515 oretnom23 php-travel-agency-system traceapplication.php sql injection oretnom23 / php-travel-agency-system | Высокий | 6.9 | 0,41 % | PoC | 27.10.2026 | |
| CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection oretnom23 / file-management-system-php | Высокий | 6.9 | 0,28 % | PoC | 21.10.2026 | |
| CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection itsourcecode / Sales-and-Inventory-System | Высокий | 5.3 | 0,21 % | PoC | 21.10.2026 | |
| CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection dhikshitha29 / Insurance-Management-System | Высокий | 6.9 | 0,33 % | PoC | 21.10.2026 | |
| CVE-2026-41573 OpenAM LDAP Injection via `_queryId` Parameter OpenIdentityPlatform / OpenAM · org.openidentityplatform.openam:openam-core-rest | Высокий | 7.1 | 0,5 % | Патч | 15.09.2026 | |
| CVE-2026-117526 reduxjs redux-devtools Remotedev Server evalAction code injection reduxjs / redux-devtools | Высокий | 4.8 | 0,14 % | PoC | 27.10.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.