CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-59239

    🚨 CVE-2026-59239 Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated...

  • CVE-2026-64641

    🚨 CVE-2026-64641 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-64642

    🚨 CVE-2026-64642 Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests...

  • CVE-2026-64643

    🚨 CVE-2026-64643 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-64644

    🚨 CVE-2026-64644 Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-66028

    🚨 CVE-2026-66028 Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated...

  • CVE-2026-66029

    🚨 CVE-2026-66029 Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated...

  • CVE-2026-66030

    🚨 CVE-2026-66030 Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated...

  • CVE-2026-10682

    🚨 CVE-2026-10682 The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed...

  • CVE-2026-10683

    🚨 CVE-2026-10683 In the Synopsys DesignWare I2C driver (drivers/i2c/i2c_dw.c) operating in target/slave mode, the rx_full interrupt handler gates...

  • CVE-2026-16481

    🚨 CVE-2026-16481 A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page...

  • CVE-2026-17612

    🚨 CVE-2026-17612 Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit...

  • CVE-2026-64646

    🚨 CVE-2026-64646 Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-64647

    🚨 CVE-2026-64647 Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through...

  • CVE-2026-66031

    🚨 CVE-2026-66031 Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated...

  • CVE-2026-42016

    🚨 CVE-2026-42016 JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation...

  • CVE-2026-42017

    🚨 CVE-2026-42017 An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under...

  • CVE-2026-56747

    🚨 CVE-2026-56747 Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху