CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66275

    🚨 CVE-2026-66275 An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This...

  • CVE-2026-66276

    🚨 CVE-2026-66276 An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive...

  • CVE-2026-66277

    🚨 CVE-2026-66277 It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to...

  • CVE-2026-67552

    🚨 CVE-2026-67552 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service...

  • CVE-2026-67553

    🚨 CVE-2026-67553 An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This...

  • CVE-2026-67554

    🚨 CVE-2026-67554 An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive...

  • CVE-2026-67590

    🚨 CVE-2026-67590 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service...

  • CVE-2026-67591

    🚨 CVE-2026-67591 An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This...

  • CVE-2026-67592

    🚨 CVE-2026-67592 It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to...

  • CVE-2026-68073

    🚨 CVE-2026-68073 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service...

  • CVE-2026-68075

    🚨 CVE-2026-68075 An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This...

  • CVE-2026-68077

    🚨 CVE-2026-68077 An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive...

  • CVE-2026-68078

    🚨 CVE-2026-68078 It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to...

  • CVE-2026-70374

    🚨 CVE-2026-70374 HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation...

  • CVE-2026-70375

    🚨 CVE-2026-70375 HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component...

  • CVE-2026-54416

    🚨 CVE-2026-54416 Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in...

  • CVE-2026-55739

    🚨 CVE-2026-55739 Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and...

  • CVE-2026-55747

    🚨 CVE-2026-55747 The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p)...

Статистика статей

Статьи
53,088
Просмотры
263,320
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху