CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-27775

    🚨 CVE-2026-27775 Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a...

  • CVE-2026-27779

    🚨 CVE-2026-27779 Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed...

  • CVE-2026-27780

    🚨 CVE-2026-27780 Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing...

  • CVE-2026-27783

    🚨 CVE-2026-27783 Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.

  • CVE-2026-28699

    🚨 CVE-2026-28699 Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic...

  • CVE-2026-28705

    🚨 CVE-2026-28705 Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets...

  • CVE-2026-28740

    🚨 CVE-2026-28740 Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have...

  • CVE-2026-28744

    🚨 CVE-2026-28744 Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository...

  • CVE-2026-45488

    🚨 CVE-2026-45488 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker...

  • CVE-2026-45489

    🚨 CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability

  • CVE-2026-55945

    🚨 CVE-2026-55945 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based)...

  • CVE-2026-56645

    🚨 CVE-2026-56645 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-56646

    🚨 CVE-2026-56646 Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...

  • CVE-2026-57974

    🚨 CVE-2026-57974 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-57975

    🚨 CVE-2026-57975 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker...

  • CVE-2026-57977

    🚨 CVE-2026-57977 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an...

  • CVE-2026-57981

    🚨 CVE-2026-57981 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-57983

    🚨 CVE-2026-57983 Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a...

Статистика статей

Статьи
53,092
Просмотры
271,555
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху