CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2025-4878

    🚨 CVE-2025-4878 A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file()...

  • CVE-2025-4056

    🚨 CVE-2025-4056 A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using...

  • CVE-2025-8283

    🚨 CVE-2025-8283 A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search...

  • CVE-2025-8556

    🚨 CVE-2025-8556 A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise...

  • CVE-2025-8277

    🚨 CVE-2025-8277 A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The...

  • CVE-2025-60019

    🚨 CVE-2025-60019 glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory...

  • CVE-2025-9230

    🚨 CVE-2025-9230 Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an...

  • CVE-2025-9231

    🚨 CVE-2025-9231 Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...

  • CVE-2025-9232

    🚨 CVE-2025-9232 Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy'...

  • CVE-2025-9640

    🚨 CVE-2025-9640 A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data...

  • CVE-2026-0989

    🚨 CVE-2026-0989 A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not...

  • CVE-2026-0992

    🚨 CVE-2026-0992 A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs...

  • CVE-2026-0988

    🚨 CVE-2026-0988 A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can...

  • CVE-2025-9615

    🚨 CVE-2025-9615 A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users...

  • CVE-2025-9820

    🚨 CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token...

  • CVE-2026-1485

    🚨 CVE-2026-1485 A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header...

  • CVE-2026-2243

    🚨 CVE-2026-2243 A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to...

  • CVE-2026-0965

    🚨 CVE-2026-0965 A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit...

Статистика статей

Статьи
53,084
Просмотры
231,620
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху