CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-49346

    🚨 CVE-2026-49346 libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large...

  • CVE-2026-50559

    🚨 CVE-2026-50559 Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1...

  • CVE-2026-56073

    🚨 CVE-2026-56073 Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypass email...

  • CVE-2026-56080

    🚨 CVE-2026-56080 Capgo before 12.128.2 contains a flaw in the Enforce Password Policy feature: after a Super Admin enables the policy and...

  • CVE-2026-56081

    🚨 CVE-2026-56081 Cap-go before 12.128.2 contains an authentication logic flaw that lets an attacker register and control an account bound to a...

  • CVE-2026-56082

    🚨 CVE-2026-56082 Capgo (Cap-go/capgo) before 12.128.2 contains an improper access control vulnerability in the SECURITY DEFINER PostgREST RPC...

  • CVE-2026-9265

    🚨 CVE-2026-9265 Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path...

  • CVE-2026-48908

    🚨 CVE-2026-48908 A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the...

  • CVE-2026-48909

    🚨 CVE-2026-48909 SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated...

  • CVE-2026-48939

    🚨 CVE-2026-48939 A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature...

  • CVE-2026-56235

    🚨 CVE-2026-56235 Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metrics...

  • CVE-2026-56307

    🚨 CVE-2026-56307 Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the...

  • CVE-2026-5366

    🚨 CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the...

  • CVE-2026-56347

    🚨 CVE-2026-56347 AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to...

  • CVE-2026-56355

    🚨 CVE-2026-56355 GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

  • CVE-2026-12770

    🚨 CVE-2026-12770 A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file...

  • CVE-2026-12771

    🚨 CVE-2026-12771 A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file...

  • CVE-2026-12772

    🚨 CVE-2026-12772 A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file...

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху