CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2023-23605

    🚨 CVE-2023-23605 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of...

  • CVE-2023-25728

    🚨 CVE-2023-25728 The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's unredacted URI when...

  • CVE-2023-25730

    🚨 CVE-2023-25730 A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into...

  • CVE-2023-25734

    🚨 CVE-2023-25734 After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that...

  • CVE-2023-25735

    🚨 CVE-2023-25735 Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main...

  • CVE-2023-25737

    🚨 CVE-2023-25737 An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This...

  • CVE-2023-25739

    🚨 CVE-2023-25739 Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in...

  • CVE-2023-25742

    🚨 CVE-2023-25742 When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This...

  • CVE-2023-25743

    🚨 CVE-2023-25743 A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser...

  • CVE-2023-25752

    🚨 CVE-2023-25752 When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds...

  • CVE-2023-28164

    🚨 CVE-2023-28164 Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing...

  • CVE-2023-28176

    🚨 CVE-2023-28176 Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we...

  • CVE-2023-29535

    🚨 CVE-2023-29535 Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in...

  • CVE-2023-29548

    🚨 CVE-2023-29548 A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects...

  • CVE-2023-29550

    🚨 CVE-2023-29550 Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we...

  • CVE-2023-32206

    🚨 CVE-2023-32206 An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR <...

  • CVE-2023-32212

    🚨 CVE-2023-32212 An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113...

  • CVE-2023-27465

    🚨 CVE-2023-27465 A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 <...

Статистика статей

Статьи
53,087
Просмотры
257,680
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху