CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-114113

    🚨 CVE-2026-114113 Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328...

  • CVE-2026-114114

    🚨 CVE-2026-114114 Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8 byte...

  • CVE-2026-114115

    🚨 CVE-2026-114115 Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays with...

  • CVE-2026-114116

    🚨 CVE-2026-114116 Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats...

  • CVE-2026-114117

    🚨 CVE-2026-114117 Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where K is any...

  • CVE-2026-114118

    🚨 CVE-2026-114118 Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first...

  • CVE-2026-114119

    🚨 CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is...

  • CVE-2026-114197

    🚨 CVE-2026-114197 Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted...

  • CVE-2026-114198

    🚨 CVE-2026-114198 Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted...

  • CVE-2026-110876

    🚨 CVE-2026-110876 AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table...

  • CVE-2026-111125

    🚨 CVE-2026-111125 CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers...

  • CVE-2026-111130

    🚨 CVE-2026-111130 OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past...

  • CVE-2026-111135

    🚨 CVE-2026-111135 libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows...

  • CVE-2026-111140

    🚨 CVE-2026-111140 libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data...

  • CVE-2026-111145

    🚨 CVE-2026-111145 ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates...

  • CVE-2026-111155

    🚨 CVE-2026-111155 libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses...

  • CVE-2026-111150

    🚨 CVE-2026-111150 ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor...

  • CVE-2026-111160

    🚨 CVE-2026-111160 LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху