CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-8565

    🚨 CVE-2026-8565 Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user...

  • CVE-2026-8584

    🚨 CVE-2026-8584 Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had...

  • CVE-2026-0432

    🚨 CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve...

  • CVE-2026-8686

    🚨 CVE-2026-8686 Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of...

  • CVE-2026-8704

    🚨 CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.

  • CVE-2026-46719

    🚨 CVE-2026-46719 Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines...

  • CVE-2026-8721

    🚨 CVE-2026-8721 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs...

  • CVE-2026-8784

    🚨 CVE-2026-8784 A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c...

  • CVE-2026-37978

    🚨 CVE-2026-37978 A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit this by invoking the...

  • CVE-2026-48968

    🚨 CVE-2026-48968 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows...

  • CVE-2026-44887

    🚨 CVE-2026-44887 Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's web-based configuration...

  • CVE-2026-8359

    🚨 CVE-2026-8359 When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle...

  • CVE-2026-44709

    🚨 CVE-2026-44709 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads the...

  • CVE-2026-48525

    🚨 CVE-2026-48525 PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the...

  • CVE-2026-45021

    🚨 CVE-2026-45021 Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2.9.15...

  • CVE-2026-45310

    🚨 CVE-2026-45310 CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved...

  • CVE-2026-35277

    🚨 CVE-2026-35277 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily...

  • CVE-2026-21037

    🚨 CVE-2026-21037 Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch...

Статистика статей

Статьи
53,093
Просмотры
284,159
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху