CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-86589

    🚨 CVE-2026-86589 Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through...

  • CVE-2026-107928

    🚨 CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an...

  • CVE-2026-107929

    🚨 CVE-2026-107929 When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`...

  • CVE-2026-92390

    🚨 CVE-2026-92390 When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an...

  • CVE-2026-92391

    🚨 CVE-2026-92391 A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup...

  • CVE-2026-94265

    🚨 CVE-2026-94265 When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain...

  • CVE-2026-94266

    🚨 CVE-2026-94266 libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even...

  • CVE-2026-82819

    🚨 CVE-2026-82819 A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated...

  • CVE-2026-70386

    🚨 CVE-2026-70386 Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization...

  • CVE-2026-87095

    🚨 CVE-2026-87095 Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected...

  • CVE-2026-74758

    🚨 CVE-2026-74758 A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC...

  • CVE-2026-78048

    🚨 CVE-2026-78048 A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version <...

  • CVE-2026-78058

    🚨 CVE-2026-78058 Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms allows a...

  • CVE-2026-78066

    🚨 CVE-2026-78066 Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled input bound...

  • CVE-2026-78334

    🚨 CVE-2026-78334 Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to...

  • CVE-2026-79704

    🚨 CVE-2026-79704 An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0) on all...

  • CVE-2026-86249

    🚨 CVE-2026-86249 On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption on...

  • CVE-2024-4989

    🚨 CVE-2024-4989 The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicious...

Статистика статей

Статьи
53,101
Просмотры
288,506
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху