CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-6842

    🚨 CVE-2026-6842 A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory...

  • CVE-2026-59842

    🚨 CVE-2026-59842 A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the...

  • CVE-2026-59849

    🚨 CVE-2026-59849 A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to...

  • CVE-2026-66338

    🚨 CVE-2026-66338 A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that...

  • CVE-2026-68744

    🚨 CVE-2026-68744 A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all...

  • CVE-2026-54876

    🚨 CVE-2026-54876 Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending...

  • CVE-2026-65941

    🚨 CVE-2026-65941 In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service...

  • CVE-2026-86564

    🚨 CVE-2026-86564 A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler...

  • CVE-2026-87876

    🚨 CVE-2026-87876 Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer...

  • CVE-2026-90463

    🚨 CVE-2026-90463 A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially...

  • CVE-2026-89020

    🚨 CVE-2026-89020 MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget...

  • CVE-2026-91926

    🚨 CVE-2026-91926 A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message...

  • CVE-2026-79699

    🚨 CVE-2026-79699 A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g...

  • CVE-2026-91142

    🚨 CVE-2026-91142 A flaw was found in Cockpit. An authenticated local user with a large user identifier (UID) can cause unauthorized modification...

  • CVE-2026-71463

    🚨 CVE-2026-71463 Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if...

  • CVE-2026-71464

    🚨 CVE-2026-71464 LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike...

  • CVE-2026-71465

    🚨 CVE-2026-71465 RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit])...

  • CVE-2026-96546

    🚨 CVE-2026-96546 A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS...

Статистика статей

Статьи
53,083
Просмотры
228,155
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху