CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114364

    🚨 CVE-2026-114364 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. This...

  • CVE-2026-16306

    🚨 CVE-2026-16306 Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote...

  • CVE-2026-65059

    🚨 CVE-2026-65059 Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a...

  • CVE-2026-120630

    🚨 CVE-2026-120630 CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in URLs by...

  • CVE-2026-120656

    🚨 CVE-2026-120656 OpenKruise kruise-manager exposes an unauthenticated pprof endpoint, enabled by default, opening it on 0.0.0.0:8090, which can...

  • CVE-2026-45514

    🚨 CVE-2026-45514 In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the...

  • CVE-2026-49912

    🚨 CVE-2026-49912 In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a...

  • CVE-2026-49922

    🚨 CVE-2026-49922 In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused...

  • CVE-2026-49923

    🚨 CVE-2026-49923 In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code...

  • CVE-2026-49924

    🚨 CVE-2026-49924 In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource...

  • CVE-2026-49931

    🚨 CVE-2026-49931 In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This...

  • CVE-2026-49934

    🚨 CVE-2026-49934 In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation...

  • CVE-2026-16305

    🚨 CVE-2026-16305 Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a...

  • CVE-2025-5769

    🚨 CVE-2025-5769 The authentication endpoint does not properly encode user-supplied input before rendering it within the web page. This lack of...

  • CVE-2026-120987

    🚨 CVE-2026-120987 Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.

  • CVE-2026-74846

    🚨 CVE-2026-74846 Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in...

  • CVE-2026-92610

    🚨 CVE-2026-92610 In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by...

  • CVE-2026-119922

    🚨 CVE-2026-119922 Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in...

Статистика статей

Статьи
53,084
Просмотры
229,863
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху