CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-57434

    🚨 CVE-2026-57434 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when...

  • CVE-2026-57435

    🚨 CVE-2026-57435 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native...

  • CVE-2026-57436

    🚨 CVE-2026-57436 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root=...

  • CVE-2026-57437

    🚨 CVE-2026-57437 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext...

  • CVE-2026-57534

    🚨 CVE-2026-57534 Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.

  • CVE-2026-57536

    🚨 CVE-2026-57536 Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful...

  • CVE-2026-57587

    🚨 CVE-2026-57587 A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned...

  • CVE-2026-57588

    🚨 CVE-2026-57588 A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a...

  • CVE-2026-116095

    🚨 CVE-2026-116095 A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function...

  • CVE-2026-28367

    🚨 CVE-2026-28367 A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator...

  • CVE-2026-4961

    🚨 CVE-2026-4961 A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file...

  • CVE-2026-5022

    🚨 CVE-2026-5022 The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing...

  • CVE-2026-27860

    🚨 CVE-2026-27860 If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to...

  • CVE-2026-26060

    🚨 CVE-2026-26060 Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could...

  • CVE-2026-33045

    🚨 CVE-2026-33045 Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and...

  • CVE-2026-34388

    🚨 CVE-2026-34388 Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability in Fleet's gRPC Launcher...

  • CVE-2026-4972

    🚨 CVE-2026-4972 A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of...

  • CVE-2026-33874

    🚨 CVE-2026-33874 Gematik Authenticator securely authenticates users for login to digital health applications. Starting in version 4.12.0 and prior...

Статистика статей

Статьи
53,101
Просмотры
286,096
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху