CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-53902

    🚨 CVE-2026-53909 MCO does not correctly validate types of uploaded files. File upload validation functionality relies only on client-side checks...

  • CVE-2026-5120

    🚨 CVE-2026-5120 A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access...

  • CVE-2026-8387

    🚨 CVE-2026-8387 A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip`...

  • CVE-2026-13603

    🚨 CVE-2026-13603 The payment integration pretix-oppwa provides support for the payment providers VR Payment, Hobex, and potentially others based...

  • CVE-2026-57692

    🚨 CVE-2026-57692 Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects...

  • CVE-2026-12374

    🚨 CVE-2026-12374 Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service...

  • CVE-2026-58031

    🚨 CVE-2026-58031 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation...

  • CVE-2026-58034

    🚨 CVE-2026-58034 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation...

  • CVE-2026-58035

    🚨 CVE-2026-58035 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation...

  • CVE-2026-58399

    🚨 CVE-2026-58399 @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an...

  • CVE-2026-5220

    🚨 CVE-2026-5220 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information...

  • CVE-2026-6283

    🚨 CVE-2026-6283 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information...

  • CVE-2026-6682

    🚨 CVE-2026-6682 In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to...

  • CVE-2026-6683

    🚨 CVE-2026-6683 FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero...

  • CVE-2026-6686

    🚨 CVE-2026-6686 FatFs R0.16 and earlier contains an uninitialized cluster exposure when f_lseek() extends files beyond EOF without zero-filling...

  • CVE-2026-6687

    🚨 CVE-2026-6687 FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted...

  • CVE-2026-6688

    🚨 CVE-2026-6688 FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN...

  • CVE-2026-13706

    🚨 CVE-2026-13706 Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability is associated with program...

Статистика статей

Статьи
53,092
Просмотры
275,465
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху