CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58521

    🚨 CVE-2026-58521 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation...

  • CVE-2026-13760

    🚨 CVE-2026-13760 OS command injection in the NodejsFunction Docker bundling pipeline (OsCommand helper) in AWS aws-cdk-lib on all platforms might...

  • CVE-2026-13769

    🚨 CVE-2026-13769 Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not...

  • CVE-2026-14358

    🚨 CVE-2026-14358 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation...

  • CVE-2026-41121

    🚨 CVE-2026-41121 Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link...

  • CVE-2026-49119

    🚨 CVE-2026-49119 Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows...

  • CVE-2026-51947

    🚨 CVE-2026-51947 An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and...

  • CVE-2026-58451

    🚨 CVE-2026-58451 Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read...

  • CVE-2026-58517

    🚨 CVE-2026-58517 Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows...

  • CVE-2026-14265

    🚨 CVE-2026-14265 Deserialization of untrusted data in the RemoteQueryCachePlugin in Amazon Web Services AWS Advanced JDBC Wrapper 3.3.0 through...

  • CVE-2026-14363

    🚨 CVE-2026-14363 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation...

  • CVE-2026-54164

    🚨 CVE-2026-54164 API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. In versions prior to 4.1.30, 4.2.26 and 4.3.12...

  • CVE-2026-54908

    🚨 CVE-2026-54908 Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of...

  • CVE-2026-55688

    🚨 CVE-2026-55688 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP...

  • CVE-2026-58457

    🚨 CVE-2026-58457 Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that...

  • CVE-2026-50521

    🚨 CVE-2026-50521 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

  • CVE-2026-58592

    🚨 CVE-2026-58592 Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader...

  • CVE-2026-14340

    🚨 CVE-2026-14340 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to...

Статистика статей

Статьи
53,092
Просмотры
273,852
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху