CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-61718

    🚨 CVE-2026-61718 bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6.12, the BunkerWeb web UI...

  • CVE-2026-62963

    🚨 CVE-2026-62963 Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.4, Centrifugo unidirectional WebSocket transport...

  • CVE-2026-63397

    🚨 CVE-2026-63397 remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql...

  • CVE-2026-11889

    🚨 CVE-2026-11889 SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation attack that...

  • CVE-2026-33692

    🚨 CVE-2026-33692 WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the...

  • CVE-2026-33731

    🚨 CVE-2026-33731 WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at...

  • CVE-2026-44019

    🚨 CVE-2026-44019 Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and...

  • CVE-2026-44023

    🚨 CVE-2026-44023 Docling Core defines core data types and transformations for the document processing application Docling. In versions 1.5.0 and...

  • CVE-2026-53409

    🚨 CVE-2026-53409 Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an...

  • CVE-2026-53410

    🚨 CVE-2026-53410 A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for...

  • CVE-2026-55173

    🚨 CVE-2026-55173 WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix...

  • CVE-2026-60073

    🚨 CVE-2026-60073 An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device...

  • CVE-2026-61378

    🚨 CVE-2026-61378 A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system...

  • CVE-2026-13713

    🚨 CVE-2026-13713 YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on the...

  • CVE-2026-44174

    🚨 CVE-2026-44174 Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes that...

  • CVE-2026-44175

    🚨 CVE-2026-44175 Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did not securely sanitize the...

  • CVE-2026-44176

    🚨 CVE-2026-44176 Kirby is an open-source content management system. Versions prior to 4.9.1 and 5.4.1 do not check the `pages.access` permission...

  • CVE-2026-44177

    🚨 CVE-2026-44177 Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly...

Статистика статей

Статьи
53,091
Просмотры
265,978
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху