CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-45617

    🚨 CVE-2026-45617 LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the...

  • CVE-2026-48764

    🚨 CVE-2026-48764 TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and...

  • CVE-2026-50141

    🚨 CVE-2026-50141 Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC...

  • CVE-2026-54219

    🚨 CVE-2026-54219 UBB.threads is vulnerable to Stored XSS via user posts and user profile fields. The application fails to properly sanitize user...

  • CVE-2026-48937

    🚨 CVE-2026-48937 A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This...

  • CVE-2026-47847

    🚨 CVE-2026-47847 Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera...

  • CVE-2026-48716

    🚨 CVE-2026-48716 nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a...

  • CVE-2026-48980

    🚨 CVE-2026-48980 pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment...

  • CVE-2026-45696

    🚨 CVE-2026-45696 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry...

  • CVE-2026-12045

    🚨 CVE-2026-12045 Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that the...

  • CVE-2026-12046

    🚨 CVE-2026-12046 Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/<trans_id> and POST...

  • CVE-2026-12050

    🚨 CVE-2026-12050 SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid}). The user-supplied...

  • CVE-2026-50034

    🚨 CVE-2026-50034 An attacker within BLE communication range can passively intercept wireless traffic and obtain sensitive health-related...

  • CVE-2026-11941

    🚨 CVE-2026-11941 Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The...

  • CVE-2026-39999

    🚨 CVE-2026-39999 Authentication Bypass by Spoofing vulnerability in Apache APISIX. The attacker can completely bypass authentication capitalising...

  • CVE-2026-4026

    🚨 CVE-2026-4026 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with...

  • CVE-2026-4027

    🚨 CVE-2026-4027 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to...

  • CVE-2026-21768

    🚨 CVE-2026-21768 The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly...

Статистика статей

Статьи
53,098
Просмотры
285,102
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху