CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-116170

    🚨 CVE-2026-116170 SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting...

  • CVE-2026-116171

    🚨 CVE-2026-116171 SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows...

  • CVE-2026-116172

    🚨 CVE-2026-116172 vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allows remote...

  • CVE-2026-116173

    🚨 CVE-2026-116173 vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore...

  • CVE-2026-116174

    🚨 CVE-2026-116174 vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream...

  • CVE-2026-116175

    🚨 CVE-2026-116175 vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls...

  • CVE-2026-116176

    🚨 CVE-2026-116176 vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound...

  • CVE-2026-116177

    🚨 CVE-2026-116177 vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers...

  • CVE-2026-116178

    🚨 CVE-2026-116178 vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by...

  • CVE-2026-116180

    🚨 CVE-2026-116180 vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an...

  • CVE-2026-116181

    🚨 CVE-2026-116181 vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the...

  • CVE-2026-116182

    🚨 CVE-2026-116182 phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external...

  • CVE-2026-116183

    🚨 CVE-2026-116183 phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to...

  • CVE-2026-116184

    🚨 CVE-2026-116184 OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in...

  • CVE-2026-116185

    🚨 CVE-2026-116185 OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other...

  • CVE-2026-116186

    🚨 CVE-2026-116186 OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound edge...

  • CVE-2026-116187

    🚨 CVE-2026-116187 Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows...

  • CVE-2026-116188

    🚨 CVE-2026-116188 rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting...

Статистика статей

Статьи
53,092
Просмотры
271,555
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху