CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-122320

    🚨 CVE-2026-122320 Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in...

  • CVE-2026-122321

    🚨 CVE-2026-122321 Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are...

  • CVE-2026-122322

    🚨 CVE-2026-122322 Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote...

  • CVE-2026-122323

    🚨 CVE-2026-122323 Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers...

  • CVE-2026-81816

    🚨 CVE-2026-81816 XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote...

  • CVE-2026-122324

    🚨 CVE-2026-122324 SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users'...

  • CVE-2026-122325

    🚨 CVE-2026-122325 fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead...

  • CVE-2026-122328

    🚨 CVE-2026-122328 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when...

  • CVE-2026-122329

    🚨 CVE-2026-122329 SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated...

  • CVE-2026-123095

    🚨 CVE-2026-123095 mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote...

  • CVE-2026-123096

    🚨 CVE-2026-123096 anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious...

  • CVE-2026-123158

    🚨 CVE-2026-123158 sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication...

  • CVE-2026-61813

    🚨 CVE-2026-61813 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15...

  • CVE-2026-70659

    🚨 CVE-2026-70659 stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and...

  • CVE-2026-85286

    🚨 CVE-2026-85286 HomeBox is a home inventory and organization system. Prior to 0.27.0, the POST /api/v1/users/login endpoint performs...

  • CVE-2026-102739

    🚨 CVE-2026-102739 ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including...

  • CVE-2026-112208

    🚨 CVE-2026-112208 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source...

  • CVE-2026-54145

    🚨 CVE-2026-54145 OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before...

Статистика статей

Статьи
53,082
Просмотры
202,951
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху