CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-0967

    🚨 CVE-2026-0967 A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft...

  • CVE-2026-0968

    🚨 CVE-2026-0968 A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed...

  • CVE-2026-2239

    🚨 CVE-2026-2239 A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a...

  • CVE-2026-35549

    🚨 CVE-2026-35549 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the...

  • CVE-2026-10028

    🚨 CVE-2026-10028 A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted...

  • CVE-2026-11786

    🚨 CVE-2026-11786 A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types...

  • CVE-2026-11792

    🚨 CVE-2026-11792 A heap buffer overflow flaw was found in 389 Directory Server. When audit logging is enabled, the create_masked_entry_string()...

  • CVE-2026-12528

    🚨 CVE-2026-12528 A flaw was found in 389 Directory Server in the __aclp__normalize_acltxt() function of aclparse.c. A malformed ACI (Access...

  • CVE-2026-12969

    🚨 CVE-2026-12969 An out-of-bounds read vulnerability exists in dnsmasq's find_soa() function in src/rfc1035.c. When parsing NS section records...

  • CVE-2026-12388

    🚨 CVE-2026-12388 A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from...

  • CVE-2026-14612

    🚨 CVE-2026-14612 Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access...

  • CVE-2026-14935

    🚨 CVE-2026-14935 A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverted boolean...

  • CVE-2026-15041

    🚨 CVE-2026-15041 A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing...

  • CVE-2026-15712

    🚨 CVE-2026-15712 A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking...

  • CVE-2026-15713

    🚨 CVE-2026-15713 A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context...

  • CVE-2026-15943

    🚨 CVE-2026-15943 A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue...

  • CVE-2026-16103

    🚨 CVE-2026-16103 A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where...

  • CVE-2026-15811

    🚨 CVE-2026-15811 A vulnerability was found in kronosnet's (version <=1.34) cryptographic configuration management. The framework does not...

Статистика статей

Статьи
53,084
Просмотры
231,620
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху