CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-12490

    🚨 CVE-2026-12490 When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that...

  • CVE-2026-45188

    🚨 CVE-2026-45188 Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.15.0. Users...

  • CVE-2026-46751

    🚨 CVE-2026-46751 A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.2.0 through 2.15.0. Users are recommended to...

  • CVE-2026-46752

    🚨 CVE-2026-46752 Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.0.4 through...

  • CVE-2026-54226

    🚨 CVE-2026-54226 A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. Users are recommended to...

  • CVE-2026-56091

    🚨 CVE-2026-56091 When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an...

  • CVE-2026-56130

    🚨 CVE-2026-56130 "Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse...

  • CVE-2026-42005

    🚨 CVE-2026-42005 An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of...

  • CVE-2026-33612

    🚨 CVE-2026-33612 A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

  • CVE-2026-40011

    🚨 CVE-2026-40011 An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value...

  • CVE-2026-40208

    🚨 CVE-2026-40208 An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

  • CVE-2026-40209

    🚨 CVE-2026-40209 An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being...

  • CVE-2026-40210

    🚨 CVE-2026-40210 An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over...

  • CVE-2026-40211

    🚨 CVE-2026-40211 An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right...

  • CVE-2026-42004

    🚨 CVE-2026-42004 An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a...

  • CVE-2026-12755

    🚨 CVE-2026-12755 Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an...

  • CVE-2026-27366

    🚨 CVE-2026-27366 Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

  • CVE-2026-2815

    🚨 CVE-2026-2815 Incorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys

Статистика статей

Статьи
53,101
Просмотры
286,096
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху