CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-25271

    🚨 CVE-2026-25271 Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

  • CVE-2026-34038

    🚨 CVE-2026-34038 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an...

  • CVE-2026-48267

    🚨 CVE-2026-48267 DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an...

  • CVE-2026-50135

    🚨 CVE-2026-50135 Hugo is a static site generator. From 0.123.0 to 0.161.1, a regression made RootMappingFs.statRoot use Stat (follows...

  • CVE-2026-54234

    🚨 CVE-2026-54234 vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, a frontend-legal...

  • CVE-2026-55514

    🚨 CVE-2026-55514 vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a...

  • CVE-2026-55574

    🚨 CVE-2026-55574 vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the...

  • CVE-2026-55727

    🚨 CVE-2026-55727 A flaw in the authentication mechanism for video stream requests in Genetec Security Center 5.14.0.0 prior to build 5.14.178.18...

  • CVE-2026-57571

    🚨 CVE-2026-57571 Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the...

  • CVE-2026-57572

    🚨 CVE-2026-57572 Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied...

  • CVE-2026-57573

    🚨 CVE-2026-57573 Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF...

  • CVE-2026-59711

    🚨 CVE-2026-59711 showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitrary HTML...

  • CVE-2026-59712

    🚨 CVE-2026-59712 Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retrieve...

  • CVE-2026-59713

    🚨 CVE-2026-59713 Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without...

  • CVE-2026-32718

    🚨 CVE-2026-32718 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466...

  • CVE-2026-34049

    🚨 CVE-2026-34049 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.451 through...

  • CVE-2026-34050

    🚨 CVE-2026-34050 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the...

  • CVE-2026-34153

    🚨 CVE-2026-34153 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471...

Статистика статей

Статьи
53,092
Просмотры
276,402
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху