CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58473

    🚨 CVE-2026-58473 Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the...

  • CVE-2026-58583

    🚨 CVE-2026-58583 FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation...

  • CVE-2026-59707

    🚨 CVE-2026-59707 LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows...

  • CVE-2026-42953

    🚨 CVE-2026-42953 The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write...

  • CVE-2026-42958

    🚨 CVE-2026-42958 The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially...

  • CVE-2026-49033

    🚨 CVE-2026-49033 The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code.

  • CVE-2026-49229

    🚨 CVE-2026-49229 Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling a user only blocks future...

  • CVE-2026-50179

    🚨 CVE-2026-50179 Actual is a local-first personal finance tool. Prior to 26.6.0, exportToCSV and exportQueryToCSV in...

  • CVE-2026-54601

    🚨 CVE-2026-54601 FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant...

  • CVE-2026-54602

    🚨 CVE-2026-54602 FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller...

  • CVE-2026-54698

    🚨 CVE-2026-54698 Hasura is an open-source product that provides users GraphQL or REST APIs. Prior to 2.49.2 and 2.45.5, a user can use a where...

  • CVE-2026-55418

    🚨 CVE-2026-55418 FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated...

  • CVE-2026-58266

    🚨 CVE-2026-58266 Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust...

  • CVE-2026-59153

    🚨 CVE-2026-59153 Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files...

  • CVE-2026-14380

    🚨 CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to...

  • CVE-2026-14739

    🚨 CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders...

  • CVE-2026-14740

    🚨 CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse...

  • CVE-2026-14895

    🚨 CVE-2026-14895 String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim...

Статистика статей

Статьи
53,092
Просмотры
277,842
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху