CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-49146

    🚨 CVE-2026-49146 App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ack...

  • CVE-2026-49147

    🚨 CVE-2026-49147 App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes...

  • CVE-2026-54652

    🚨 CVE-2026-54652 Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any...

  • CVE-2026-14966

    🚨 CVE-2026-14966 BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to...

  • CVE-2026-14967

    🚨 CVE-2026-14967 BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its...

  • CVE-2026-15063

    🚨 CVE-2026-15063 A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is...

  • CVE-2026-3144

    🚨 CVE-2026-3144 IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to...

  • CVE-2026-53951

    🚨 CVE-2026-53951 Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the `trust` setting's prefix...

  • CVE-2026-57439

    🚨 CVE-2026-57439 CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation...

  • CVE-2026-59262

    🚨 CVE-2026-59262 AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing...

  • CVE-2026-59702

    🚨 CVE-2026-59702 repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers...

  • CVE-2026-59724

    🚨 CVE-2026-59724 Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with...

  • CVE-2026-59725

    🚨 CVE-2026-59725 Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4...

  • CVE-2026-59868

    🚨 CVE-2026-59868 js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic...

  • CVE-2026-59869

    🚨 CVE-2026-59869 js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic...

  • CVE-2026-59870

    🚨 CVE-2026-59870 js-yaml is a JavaScript YAML parser and dumper. Prior to 3.15.1, 4.3.1, and 5.2.1, YAML11_SCHEMA support for the !!omap tag in...

  • CVE-2026-59871

    🚨 CVE-2026-59871 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath...

  • CVE-2026-114214

    🚨 CVE-2026-114214 Incorrect Authorization vulnerability in ash-project ash allows a client to read destination records unrelated to the source...

Статистика статей

Статьи
53,092
Просмотры
277,842
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху