CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-57969

    🚨 CVE-2026-57969 Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-58279

    🚨 CVE-2026-58279 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-58595

    🚨 CVE-2026-58595 Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform...

  • CVE-2026-58631

    🚨 CVE-2026-58631 Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

  • CVE-2026-58636

    🚨 CVE-2026-58636 Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate...

  • CVE-2026-58647

    🚨 CVE-2026-58647 Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to...

  • CVE-2026-59197

    🚨 CVE-2026-59197 Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds...

  • CVE-2026-59200

    🚨 CVE-2026-59200 Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls...

  • CVE-2026-59888

    🚨 CVE-2026-59888 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0...

  • CVE-2026-59891

    🚨 CVE-2026-59891 sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads...

  • CVE-2026-15747

    🚨 CVE-2026-15747 Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH...

  • CVE-2026-15757

    🚨 CVE-2026-15757 A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send...

  • CVE-2026-47967

    🚨 CVE-2026-47967 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the...

  • CVE-2026-47968

    🚨 CVE-2026-47968 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the...

  • CVE-2026-47969

    🚨 CVE-2026-47969 Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could...

  • CVE-2026-48309

    🚨 CVE-2026-48309 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the...

  • CVE-2026-48365

    🚨 CVE-2026-48365 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the...

  • CVE-2026-48368

    🚨 CVE-2026-48368 Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the...

Статистика статей

Статьи
53,092
Просмотры
269,249
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху