CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-11816

    🚨 CVE-2026-11816 Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in...

  • CVE-2026-53661

    🚨 CVE-2026-53661 Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity...

  • CVE-2026-6338

    🚨 CVE-2026-6338 A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14...

  • CVE-2026-8406

    🚨 CVE-2026-8406 openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user...

  • CVE-2026-11839

    🚨 CVE-2026-11839 Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a...

  • CVE-2026-3341

    🚨 CVE-2026-3341 IBM Langflow Desktop 1.0.0 through 1.9.2 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an...

  • CVE-2026-4096

    🚨 CVE-2026-4096 IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST...

  • CVE-2026-53777

    🚨 CVE-2026-53777 Perry before 0.5.1159 contains a path traversal vulnerability that allows a malicious build server to write arbitrary content to...

  • CVE-2026-7787

    🚨 CVE-2026-7787 IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing...

  • CVE-2026-7870

    🚨 CVE-2026-7870 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor...

  • CVE-2026-9648

    🚨 CVE-2026-9648 The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates...

  • CVE-2026-11945

    🚨 CVE-2026-11945 PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and...

  • CVE-2026-44705

    🚨 CVE-2026-44705 tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal...

  • CVE-2026-49982

    🚨 CVE-2026-49982 tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only...

  • CVE-2026-3329

    🚨 CVE-2026-3329 A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus...

  • CVE-2026-47157

    🚨 CVE-2026-47157 aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup challenge...

  • CVE-2026-48546

    🚨 CVE-2026-48546 KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting...

  • CVE-2026-49261

    🚨 CVE-2026-49261 MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1...

Статистика статей

Статьи
53,101
Просмотры
289,523
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху