CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58453

    🚨 CVE-2026-58453 JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows...

  • CVE-2026-58454

    🚨 CVE-2026-58454 JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that allows...

  • CVE-2026-49090

    🚨 CVE-2026-49090 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation...

  • CVE-2026-49091

    🚨 CVE-2026-49091 Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-Forging...

  • CVE-2026-57722

    🚨 CVE-2026-57722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel Enable Media...

  • CVE-2026-57723

    🚨 CVE-2026-57723 Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. This...

  • CVE-2026-59873

    🚨 CVE-2026-59873 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total...

  • CVE-2026-59874

    🚨 CVE-2026-59874 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with...

  • CVE-2026-59875

    🚨 CVE-2026-59875 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and...

  • CVE-2026-59876

    🚨 CVE-2026-59876 protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format...

  • CVE-2026-59877

    🚨 CVE-2026-59877 protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names...

  • CVE-2026-9074

    🚨 CVE-2026-9074 IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in...

  • CVE-2026-39822

    🚨 CVE-2026-39822 On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path...

  • CVE-2026-42505

    🚨 CVE-2026-42505 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of...

  • CVE-2026-59261

    🚨 CVE-2026-59261 OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider...

  • CVE-2026-59731

    🚨 CVE-2026-59731 Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded...

  • CVE-2026-59882

    🚨 CVE-2026-59882 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost() does not reject...

  • CVE-2026-59887

    🚨 CVE-2026-59887 linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test()...

Статистика статей

Статьи
53,092
Просмотры
275,465
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху