CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-73566

    🚨 CVE-2026-73566 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the...

  • CVE-2026-73567

    🚨 CVE-2026-73567 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the...

  • CVE-2026-73568

    🚨 CVE-2026-73568 py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method...

  • CVE-2026-73569

    🚨 CVE-2026-73569 fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1...

  • CVE-2026-73643

    🚨 CVE-2026-73643 js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time...

  • CVE-2026-73644

    🚨 CVE-2026-73644 OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in...

  • CVE-2026-73645

    🚨 CVE-2026-73645 OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the...

  • CVE-2026-73647

    🚨 CVE-2026-73647 Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend()...

  • CVE-2026-73648

    🚨 CVE-2026-73648 rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1...

  • CVE-2026-73649

    🚨 CVE-2026-73649 Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for...

  • CVE-2026-72653

    🚨 CVE-2026-72653 Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation...

  • CVE-2026-72663

    🚨 CVE-2026-72663 Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153). A...

  • CVE-2026-73489

    🚨 CVE-2026-73489 Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by...

  • CVE-2026-73660

    🚨 CVE-2026-73660 FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated...

  • CVE-2026-72814

    🚨 CVE-2026-72814 The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability. When a non-existing...

  • CVE-2026-73673

    🚨 CVE-2026-73673 Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated...

  • CVE-2026-71570

    🚨 CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted...

  • CVE-2026-73851

    🚨 CVE-2026-73851 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the...

Статистика статей

Статьи
53,088
Просмотры
262,891
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху