CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-56772

    🚨 CVE-2026-56772 NewsBlur before 14.5.0 contains a broken access control vulnerability that allows authenticated users to read private...

  • CVE-2026-56779

    🚨 CVE-2026-56779 MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows...

  • CVE-2026-56786

    🚨 CVE-2026-56786 RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length...

  • CVE-2026-56787

    🚨 CVE-2026-56787 RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decode_ssr3 function at src/rtcm3.c:1446 that...

  • CVE-2026-56788

    🚨 CVE-2026-56788 RTKLIB through 2.4.3 contains an out-of-bounds read vulnerability in getcodepri function when processing unrecognized RINEX...

  • CVE-2026-56789

    🚨 CVE-2026-56789 RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrnxobsb function in src/rinex.c that allows...

  • CVE-2026-56790

    🚨 CVE-2026-56790 CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn() function in...

  • CVE-2026-57700

    🚨 CVE-2026-57700 Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue...

  • CVE-2026-2299

    🚨 CVE-2026-2299 The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint...

  • CVE-2026-37454

    🚨 CVE-2026-37454 Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive...

  • CVE-2026-46601

    🚨 CVE-2026-46601 The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

  • CVE-2026-46602

    🚨 CVE-2026-46602 The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a...

  • CVE-2026-57520

    🚨 CVE-2026-57520 Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with...

  • CVE-2026-57521

    🚨 CVE-2026-57521 Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to access...

  • CVE-2026-57522

    🚨 CVE-2026-57522 Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which...

  • CVE-2026-12473

    🚨 CVE-2026-12473 Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without...

  • CVE-2026-37452

    🚨 CVE-2026-37452 Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive...

  • CVE-2026-56445

    🚨 CVE-2026-56445 The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join()...

Статистика статей

Статьи
53,092
Просмотры
282,592
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху