CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-35555

    🚨 CVE-2026-35555 PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an...

  • CVE-2026-44305

    🚨 CVE-2026-44305 Lemur manages TLS certificate creation. Prior to 1.9.0, when LDAP TLS is enabled (LDAP_USE_TLS = True), Lemur's LDAP...

  • CVE-2026-43680

    🚨 CVE-2026-43680 A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a...

  • CVE-2026-21024

    🚨 CVE-2026-21024 Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger...

  • CVE-2026-25710

    🚨 CVE-2026-25710 The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA...

  • CVE-2026-42948

    🚨 CVE-2026-42948 Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices. If one of the administrators input...

  • CVE-2026-42924

    🚨 CVE-2026-42924 An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through...

  • CVE-2026-0250

    🚨 CVE-2026-0250 A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to...

  • CVE-2026-33583

    🚨 CVE-2026-33583 Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and internal system keys via an...

  • CVE-2026-42582

    🚨 CVE-2026-42582 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the...

  • CVE-2026-0243

    🚨 CVE-2026-0243 A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a...

  • CVE-2026-46446

    🚨 CVE-2026-46446 SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related...

  • CVE-2026-1630

    🚨 CVE-2026-1630 WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a...

  • CVE-2026-44371

    🚨 CVE-2026-44371 Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames...

  • CVE-2026-44511

    🚨 CVE-2026-44511 Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not...

  • CVE-2026-42598

    🚨 CVE-2026-42598 Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before...

  • CVE-2026-8529

    🚨 CVE-2026-8529 Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside...

  • CVE-2026-8563

    🚨 CVE-2026-8563 Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to...

Статистика статей

Статьи
53,101
Просмотры
286,495
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху