CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58634

    🚨 CVE-2026-58634 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  • CVE-2026-62659

    🚨 CVE-2026-62659 A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the...

  • CVE-2026-15058

    🚨 CVE-2026-15058 Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an...

  • CVE-2026-15637

    🚨 CVE-2026-15637 Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows...

  • CVE-2026-15641

    🚨 CVE-2026-15641 Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated...

  • CVE-2026-15642

    🚨 CVE-2026-15642 Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server...

  • CVE-2026-15712

    🚨 CVE-2026-15712 A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking...

  • CVE-2026-45073

    🚨 CVE-2026-45073 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40...

  • CVE-2026-5040

    🚨 CVE-2026-5040 TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash...

  • CVE-2026-15409

    🚨 CVE-2026-15409 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote...

  • CVE-2026-15410

    🚨 CVE-2026-15410 Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000...

  • CVE-2026-47423

    🚨 CVE-2026-47423 DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by...

  • CVE-2026-47428

    🚨 CVE-2026-47428 Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Browser Mode served...

  • CVE-2026-47429

    🚨 CVE-2026-47429 Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used...

  • CVE-2026-47477

    🚨 CVE-2026-47477 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A...

  • CVE-2026-47478

    🚨 CVE-2026-47478 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file...

  • CVE-2026-47479

    🚨 CVE-2026-47479 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption...

  • CVE-2026-47480

    🚨 CVE-2026-47480 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful...

Статистика статей

Статьи
53,092
Просмотры
269,249
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху