CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-8050

    🚨 CVE-2026-8050 In SignalRGB versions prior to 1.3.7.0, seven of the thirteen IOCTL handlers dereference the SystemBuffer pointer without first...

  • CVE-2026-12567

    🚨 CVE-2026-12567 The github_workflows module constructs local directory paths from user-controlled repository names without validating for...

  • CVE-2026-12568

    🚨 CVE-2026-12568 The postman_download module uses the workspace name field from the Postman API to construct the local directory path without...

  • CVE-2026-44644

    🚨 CVE-2026-44644 LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. Versions 10.25.7 and below are...

  • CVE-2026-44646

    🚨 CVE-2026-44646 LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below...

  • CVE-2026-45357

    🚨 CVE-2026-45357 LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the date...

  • CVE-2026-48759

    🚨 CVE-2026-48759 TypeBot is a chatbot builder tool. Versions 3.15.2 and below have an Insecure Direct Object Reference vulnerability through...

  • CVE-2026-50267

    🚨 CVE-2026-50267 Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In...

  • CVE-2026-50268

    🚨 CVE-2026-50268 Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In...

  • CVE-2026-48768

    🚨 CVE-2026-48768 TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is...

  • CVE-2026-28573

    🚨 CVE-2026-28573 In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to...

  • CVE-2026-50641

    🚨 CVE-2026-50643 8cc is vulnerable to an Out‑of‑Bounds Read due to improper handling of #line directives and GNU linemarkers. The compiler accepts...

  • CVE-2026-8811

    🚨 CVE-2026-8811 SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can...

  • CVE-2026-11717

    🚨 CVE-2026-11717 An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of...

  • CVE-2026-11718

    🚨 CVE-2026-11718 An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of...

  • CVE-2026-11719

    🚨 CVE-2026-11719 An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across...

  • CVE-2026-11958

    🚨 CVE-2026-11958 Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and prior. An...

  • CVE-2026-12039

    🚨 CVE-2026-12039 Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded...

Статистика статей

Статьи
53,101
Просмотры
290,437
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху