CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-121688

    🚨 CVE-2026-121688 FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The...

  • CVE-2026-121689

    🚨 CVE-2026-121689 FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms...

  • CVE-2026-122664

    🚨 CVE-2026-122664 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Broadcast...

  • CVE-2026-123364

    🚨 CVE-2026-123364 OctoPrint provides a web interface for controlling consumer 3D printers. From 2.0.0rc1 until 2.0.0rc7, an authenticated user can...

  • CVE-2026-123482

    🚨 CVE-2026-123482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder...

  • CVE-2026-124683

    🚨 CVE-2026-124683 Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in...

  • CVE-2024-4741

    🚨 CVE-2024-4741 Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some...

  • CVE-2026-91993

    🚨 CVE-2026-91993 Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint...

  • CVE-2026-111605

    🚨 CVE-2026-111605 Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace...

  • CVE-2026-101394

    🚨 CVE-2026-101394 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are...

  • CVE-2026-101395

    🚨 CVE-2026-101395 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are...

  • CVE-2026-101396

    🚨 CVE-2026-101396 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are...

  • CVE-2026-120201

    🚨 CVE-2026-120201 Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain...

  • CVE-2026-0011

    🚨 CVE-2026-0011 In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error...

  • CVE-2026-0014

    🚨 CVE-2026-0014 In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation...

  • CVE-2026-0017

    🚨 CVE-2026-0017 In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This...

  • CVE-2026-42011

    🚨 CVE-2026-42011 A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous...

  • CVE-2026-42013

    🚨 CVE-2026-42013 A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation...

Статистика статей

Статьи
53,082
Просмотры
200,099
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху