CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-5509

    🚨 CVE-2026-5509 An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator...

  • CVE-2026-42878

    🚨 CVE-2026-42878 FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure...

  • CVE-2026-44635

    🚨 CVE-2026-44635 Kysely is a type-safe TypeScript SQL query builder. From 0.26.0 to 0.28.16, DefaultQueryCompiler.visitJSONPathLeg does not escape...

  • CVE-2026-45046

    🚨 CVE-2026-45046 Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements logging levels that determine what content...

  • CVE-2026-42197

    🚨 CVE-2026-42197 RELATE is a web-based courseware package. Versions prior to commit 555f0efb1c5bd7531c07cd73724d7e566a81f620 have a stored...

  • CVE-2026-42877

    🚨 CVE-2026-42877 FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier, a stored Cross-Site Scripting (XSS)...

  • CVE-2026-44590

    🚨 CVE-2026-44590 Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow...

  • CVE-2026-44724

    🚨 CVE-2026-44724 systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is...

  • CVE-2026-44886

    🚨 CVE-2026-44886 Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application...

  • CVE-2026-44888

    🚨 CVE-2026-44888 Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile() endpoint...

  • CVE-2026-45108

    🚨 CVE-2026-45108 Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to before 3.1.5 and 2.3.11...

  • CVE-2026-45134

    🚨 CVE-2026-45134 LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS...

  • CVE-2026-47161

    🚨 CVE-2026-47161 RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configures its...

  • CVE-2026-47271

    🚨 CVE-2026-47271 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, src/mem.c implemented...

  • CVE-2026-47272

    🚨 CVE-2026-47272 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, the pusb_pad_compare()...

  • CVE-2026-47273

    🚨 CVE-2026-47273 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb builds XPath...

  • CVE-2026-47274

    🚨 CVE-2026-47274 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb helper tools...

  • CVE-2026-48064

    🚨 CVE-2026-48064 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, when a PAM service is...

Статистика статей

Статьи
53,101
Просмотры
288,506
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху