CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-63764

    🚨 CVE-2026-63764 LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the...

  • CVE-2026-64821

    🚨 CVE-2026-64821 djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated...

  • CVE-2026-64821

    🚨 CVE-2026-64822 djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within...

  • CVE-2026-64881

    🚨 CVE-2026-64881 The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution...

  • CVE-2026-65055

    🚨 CVE-2026-65055 Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member...

  • CVE-2026-65057

    🚨 CVE-2026-65057 Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the...

  • CVE-2026-8982

    🚨 CVE-2026-8982 Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined...

  • CVE-2026-8983

    🚨 CVE-2026-8983 Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks...

  • CVE-2026-10674

    🚨 CVE-2026-10674 The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called...

  • CVE-2026-10675

    🚨 CVE-2026-10675 In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the...

  • CVE-2026-10677

    🚨 CVE-2026-10677 The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied...

  • CVE-2026-10678

    🚨 CVE-2026-10678 The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from...

  • CVE-2026-10679

    🚨 CVE-2026-10679 The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency /...

  • CVE-2026-10680

    🚨 CVE-2026-10680 The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in...

  • CVE-2026-16484

    🚨 CVE-2026-16484 A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown...

  • CVE-2026-21953

    🚨 CVE-2026-21953 Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The...

  • CVE-2026-21954

    🚨 CVE-2026-21954 Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The...

  • CVE-2026-34316

    🚨 CVE-2026-34316 Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The...

Статистика статей

Статьи
53,089
Просмотры
265,742
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху