CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-58624

    🚨 CVE-2026-58624 Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side...

  • CVE-2026-64650

    🚨 CVE-2026-64650 The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line...

  • CVE-2026-64651

    🚨 CVE-2026-64651 The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the...

  • CVE-2026-16324

    🚨 CVE-2026-16324 A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function of the...

  • CVE-2026-47128

    🚨 CVE-2026-47128 nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp...

  • CVE-2026-47133

    🚨 CVE-2026-47133 ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10...

  • CVE-2026-47134

    🚨 CVE-2026-47134 ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used...

  • CVE-2026-47144

    🚨 CVE-2026-47144 Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in `shame next`...

  • CVE-2026-51385

    🚨 CVE-2026-51385 An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the...

  • CVE-2026-52656

    🚨 CVE-2026-52656 An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker...

  • CVE-2026-55544

    🚨 CVE-2026-55544 NextCRM is open-source customer relationship management (CRM) software. In version 0.12.1, the MCP campaign tools expose campaign...

  • CVE-2026-55550

    🚨 CVE-2026-55550 NextCRM is open-source customer relationship management (CRM) software. The CRM product catalog is an organization-wide business...

  • CVE-2026-57494

    🚨 CVE-2026-57494 AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged...

  • CVE-2026-64625

    🚨 CVE-2026-64625 AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh...

  • CVE-2026-64626

    🚨 CVE-2026-64626 AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder...

  • CVE-2026-15899

    🚨 CVE-2026-15899 Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform...

  • CVE-2026-15900

    🚨 CVE-2026-15900 Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a...

  • CVE-2026-15901

    🚨 CVE-2026-15901 Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap...

Статистика статей

Статьи
53,091
Просмотры
268,142
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху