CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-13221

    🚨 CVE-2026-13221 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular...

  • CVE-2026-57432

    🚨 CVE-2026-57432 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in...

  • CVE-2026-57433

    🚨 CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record...

  • CVE-2026-61462

    🚨 CVE-2026-61462 mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect...

  • CVE-2026-61463

    🚨 CVE-2026-61463 Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to modify the...

  • CVE-2026-61500

    🚨 CVE-2026-61500 Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and...

  • CVE-2026-61501

    🚨 CVE-2026-61501 Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote...

  • CVE-2026-61502

    🚨 CVE-2026-61502 Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its...

  • CVE-2026-61503

    🚨 CVE-2026-61503 Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted...

  • CVE-2026-61504

    🚨 CVE-2026-61504 Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web listing, and this listing can be forced by...

  • CVE-2026-61505

    🚨 CVE-2026-61505 Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated...

  • CVE-2026-14906

    🚨 CVE-2026-14906 Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the...

  • CVE-2026-49969

    🚨 CVE-2026-49969 Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue...

  • CVE-2026-49970

    🚨 CVE-2026-49970 Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers...

  • CVE-2026-49971

    🚨 CVE-2026-49971 Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that allows authenticated or anonymous users...

  • CVE-2026-55772

    🚨 CVE-2026-55772 CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In...

  • CVE-2026-58228

    🚨 CVE-2026-58228 Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validation and...

  • CVE-2026-6875

    🚨 CVE-2026-6875 ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This...

Статистика статей

Статьи
53,092
Просмотры
271,010
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху