CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121390

    🚨 CVE-2026-121390 FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachable assertion because its ARM gateway response parser...

  • CVE-2026-119738

    🚨 CVE-2026-119738 The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic...

  • CVE-2026-121394

    🚨 CVE-2026-121394 FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious servers to...

  • CVE-2026-121398

    🚨 CVE-2026-121398 FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module during...

  • CVE-2026-121402

    🚨 CVE-2026-121402 FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfreerdp...

  • CVE-2026-121406

    🚨 CVE-2026-121406 FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompress...

  • CVE-2026-121410

    🚨 CVE-2026-121410 FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails to...

  • CVE-2026-121418

    🚨 CVE-2026-121418 SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerability that allows record users to infer restricted...

  • CVE-2026-121422

    🚨 CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass...

  • CVE-2026-121426

    🚨 CVE-2026-121426 Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that ends an angle-addr at a '>'...

  • CVE-2026-121430

    🚨 CVE-2026-121430 AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST...

  • CVE-2026-121434

    🚨 CVE-2026-121434 Froxlor 2.3.0 before 2.3.15 contains a missing authorization check in the Certificates.add and Certificates.update API commands...

  • CVE-2026-121438

    🚨 CVE-2026-121438 Mistune before 3.3.3 contains a denial of service vulnerability in InlineParser.parse_link that allows attackers to cause...

  • CVE-2026-104913

    🚨 CVE-2026-104913 The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress is vulnerable to Arbitrary File Upload in...

  • CVE-2026-115816

    🚨 CVE-2026-115816 The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (review body)'...

  • CVE-2026-116562

    🚨 CVE-2026-116562 The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...

  • CVE-2026-118046

    🚨 CVE-2026-118046 The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site...

  • CVE-2026-118054

    🚨 CVE-2026-118054 The LearnPress – Course Review plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'review_title...

Статистика статей

Статьи
53,082
Просмотры
225,660
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху