CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-62856

    🚨 CVE-2026-62856 FreeScout is a self-hosted help desk and shared mailbox application. Prior to version 1.8.226, the polycast/receive endpoint...

  • CVE-2026-85743

    🚨 CVE-2026-85743 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.230, multiple outbound paths in...

  • CVE-2026-85744

    🚨 CVE-2026-85744 FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.227, the conversation_merge action records a failed...

  • CVE-2024-2511

    🚨 CVE-2024-2511 Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions...

  • CVE-2023-6237

    🚨 CVE-2023-6237 Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the...

  • CVE-2024-4603

    🚨 CVE-2024-4603 Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the...

  • CVE-2024-5535

    🚨 CVE-2024-5535 Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a...

  • CVE-2024-9143

    🚨 CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead...

  • CVE-2024-4741

    🚨 CVE-2024-4741 Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some...

  • CVE-2024-13176

    🚨 CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature...

  • CVE-2024-12797

    🚨 CVE-2024-12797 Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not...

  • CVE-2025-4476

    🚨 CVE-2025-4476 A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a...

  • CVE-2025-5915

    🚨 CVE-2025-5915 A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a...

  • CVE-2025-5916

    🚨 CVE-2025-5916 A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when...

  • CVE-2025-5917

    🚨 CVE-2025-5917 A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...

  • CVE-2025-5918

    🚨 CVE-2025-5918 A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar...

  • CVE-2025-6170

    🚨 CVE-2025-6170 A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an...

  • CVE-2025-6199

    🚨 CVE-2025-6199 A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the...

Статистика статей

Статьи
53,084
Просмотры
231,620
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху