CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-21056

    🚨 CVE-2026-21056 Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

  • CVE-2026-21057

    🚨 CVE-2026-21057 Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.

  • CVE-2026-28564

    🚨 CVE-2026-28564 Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication...

  • CVE-2026-40005

    🚨 CVE-2026-40005 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacker can...

  • CVE-2026-40006

    🚨 CVE-2026-40006 Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for...

  • CVE-2026-40007

    🚨 CVE-2026-40007 Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipe_air_gap_receiver_enabled=true...

  • CVE-2026-40008

    🚨 CVE-2026-40008 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB. The pipe...

  • CVE-2026-40009

    🚨 CVE-2026-40009 Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full...

  • CVE-2026-40452

    🚨 CVE-2026-40452 Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery...

  • CVE-2026-40454

    🚨 CVE-2026-40454 Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client...

  • CVE-2026-15378

    🚨 CVE-2026-15378 A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind...

  • CVE-2026-41876

    🚨 CVE-2026-41876 R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands...

  • CVE-2026-41876

    🚨 CVE-2026-41877 R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS into...

  • CVE-2026-56254

    🚨 CVE-2026-56254 In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each...

  • CVE-2026-56261

    🚨 CVE-2026-56261 Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and...

  • CVE-2026-56305

    🚨 CVE-2026-56305 Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows attackers to...

  • CVE-2026-56309

    🚨 CVE-2026-56309 Capgo before 12.128.2 fails to enforce plan/quota restrictions on the /files/upload/attachments endpoint, allowing plan-blocked...

  • CVE-2026-56312

    🚨 CVE-2026-56312 Capgo before 12.128.2 contains an improper validation vulnerability in the accept_invitation endpoint that creates user accounts...

Статистика статей

Статьи
53,092
Просмотры
273,024
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху