CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-11852

    🚨 CVE-2026-11852 Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are...

  • CVE-2026-11853

    🚨 CVE-2026-11853 Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages (.dsc)...

  • CVE-2026-11859

    🚨 CVE-2026-11859 An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface...

  • CVE-2026-24066

    🚨 CVE-2026-24066 Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which...

  • CVE-2026-24067

    🚨 CVE-2026-24067 Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which...

  • CVE-2026-49069

    🚨 CVE-2026-49069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Portfolio allows...

  • CVE-2026-49495

    🚨 CVE-2026-49495 Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle...

  • CVE-2026-49496

    🚨 CVE-2026-49496 Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator...

  • CVE-2026-49498

    🚨 CVE-2026-49498 Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that...

  • CVE-2026-52750

    🚨 CVE-2026-52750 Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters...

  • CVE-2026-52751

    🚨 CVE-2026-52751 Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows...

  • CVE-2026-52752

    🚨 CVE-2026-52752 Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names...

  • CVE-2026-52754

    🚨 CVE-2026-52754 Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user...

  • CVE-2026-52755

    🚨 CVE-2026-52755 Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write...

  • CVE-2026-52756

    🚨 CVE-2026-52756 Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and...

  • CVE-2026-52757

    🚨 CVE-2026-52757 Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the...

  • CVE-2026-53435

    🚨 CVE-2026-53435 In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types...

  • CVE-2026-53436

    🚨 CVE-2026-53436 Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing...

Статистика статей

Статьи
53,101
Просмотры
288,506
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху