СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
16| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-44601 Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because torproject / Tor · torproject / tor | Высокий | 7.5 | 0,34 % | Патч | 07.05.2026 | |
| CVE-2026-42609 Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic getgrav / grav | Критический | 8.1 | 0,46 % | PoCПатч | 11.05.2026 | |
| CVE-2026-112285 Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders Thelia / Thelia | Средний | 5.3 | 0,29 % | Патч | 19.10.2026 | |
| CVE-2026-105850 Payload: Order confirmation validation issue in Payload Ecommerce payloadcms / payload · @payloadcms / plugin-ecommerce | Высокий | 8.8 | 0,31 % | 06.10.2026 | ||
| CVE-2026-86198 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket pmmp / PocketMine-MP | Низкий | 2.3 | 0,38 % | Патч | 09.09.2026 | |
| CVE-2026-45734 MyBB: Default CAPTCHA missing invalidation mybb / mybb | Средний | 5.3 | 0,55 % | 18.08.2026 | ||
| CVE-2024-4629 Keycloak: potential bypass of brute force protection · Red Hat / Red Hat Build of Keycloak | Средний | 6.5 | 0,79 % | 03.09.2024 | ||
| CVE-2024-11717 Tokens in CTFd used for account activation and password resetting can be used interchangeably for th CTFd / CTFd | Высокий | 6.3 | 0,68 % | PoCПатч | 02.01.2025 | |
| CVE-2024-11716 While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registr CTFd / CTFd | Критический | 5.3 | 11,58 % | PoCПатч | 02.01.2025 | |
| CVE-2025-62782 InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement Phoenix616 / InventoryGui | Средний | 5.9 | 0,26 % | 27.10.2025 | ||
| CVE-2025-62783 InventoryGui affected by item duplication in GUIs which use GuiStorageElement Phoenix616 / InventoryGui | Средний | 5.0 | 0,25 % | 27.10.2025 | ||
| CVE-2025-62784 InventoryGui allows item duplication in GUIs which use GuiStorageElement Phoenix616 / InventoryGui | Средний | 5.3 | 0,22 % | 27.10.2025 | ||
| CVE-2025-54315 The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event unique Matrix / Matrix specification | Высокий | 7.1 | 0,34 % | 02.10.2025 | ||
| CVE-2025-58135 Zoom Workplace Clients for Windows - Improper Action Enforcement Zoom Communications, Inc / Zoom Workplace Clients for Windows | Средний | 5.3 | 0,27 % | 10.09.2025 | ||
| CVE-2024-11301 Improper Enforcement of Unique Constraint in lunary-ai/lunary lunary-ai / lunary-ai/lunary | Средний | 6.5 | 0,59 % | 20.03.2025 | ||
| CVE-2024-12123 Unauthorized Modification of Ticket Requester Issuetrak / Issuetrak | Средний | 5.3 | 0,38 % | 04.12.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.