CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114144

    🚨 CVE-2026-114144 toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal...

  • CVE-2026-114656

    🚨 CVE-2026-114656 Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip...

  • CVE-2026-114715

    🚨 CVE-2026-114715 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa...

  • CVE-2026-114716

    🚨 CVE-2026-114716 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability...

  • CVE-2026-114717

    🚨 CVE-2026-114717 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is...

  • CVE-2026-114718

    🚨 CVE-2026-114718 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password...

  • CVE-2026-114719

    🚨 CVE-2026-114719 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the...

  • CVE-2026-114720

    🚨 CVE-2026-114720 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote...

  • CVE-2026-55888

    🚨 CVE-2026-55888 XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the...

  • CVE-2026-115776

    🚨 CVE-2026-115776 Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1...

  • CVE-2026-115907

    🚨 CVE-2026-115907 zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built...

  • CVE-2026-115911

    🚨 CVE-2026-115911 vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a...

  • CVE-2026-115914

    🚨 CVE-2026-115914 vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2...

  • CVE-2026-115918

    🚨 CVE-2026-115918 vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows...

  • CVE-2026-116678

    🚨 CVE-2026-116678 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates...

  • CVE-2026-116578

    🚨 CVE-2026-116578 Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates...

  • CVE-2026-118256

    🚨 CVE-2026-118256 Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling...

  • CVE-2026-115706

    🚨 CVE-2026-115706 Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation...

Статистика статей

Статьи
53,101
Просмотры
289,523
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху