CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-8325

    🚨 CVE-2026-8325 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious...

  • CVE-2026-9169

    🚨 CVE-2026-9169 DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code...

  • CVE-2026-9030

    🚨 CVE-2026-9030 A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path...

  • CVE-2026-8798

    🚨 CVE-2026-8798 In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU...

  • CVE-2026-8718

    🚨 CVE-2026-8718 tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS...

  • CVE-2026-9214

    🚨 CVE-2026-9214 Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local...

  • CVE-2026-9318

    🚨 CVE-2026-9318 tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers...

  • CVE-2026-74880

    🚨 CVE-2026-74880 openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes...

  • CVE-2026-74886

    🚨 CVE-2026-74886 openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a...

  • CVE-2026-74890

    🚨 CVE-2026-74890 openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag...

  • CVE-2026-74892

    🚨 CVE-2026-74892 openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration...

  • CVE-2026-76221

    🚨 CVE-2026-76221 GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to...

  • CVE-2026-76226

    🚨 CVE-2026-76226 Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk...

  • CVE-2026-76239

    🚨 CVE-2026-76239 Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing...

  • CVE-2026-76259

    🚨 CVE-2026-76259 In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the...

  • CVE-2026-76311

    🚨 CVE-2026-76311 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token...

  • CVE-2026-76376

    🚨 CVE-2026-76376 In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose...

  • CVE-2026-76383

    🚨 CVE-2026-76383 In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to...

Статистика статей

Статьи
53,087
Просмотры
260,726
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху