CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113738

    🚨 CVE-2026-113738 A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This...

  • CVE-2026-113740

    🚨 CVE-2026-113740 A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown...

  • CVE-2026-113741

    🚨 CVE-2026-113741 A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown...

  • CVE-2026-114038

    🚨 CVE-2026-114038 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format...

  • CVE-2026-114041

    🚨 CVE-2026-114041 FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte...

  • CVE-2026-114043

    🚨 CVE-2026-114043 FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because...

  • CVE-2026-114044

    🚨 CVE-2026-114044 FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers...

  • CVE-2026-114045

    🚨 CVE-2026-114045 FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in...

  • CVE-2026-114046

    🚨 CVE-2026-114046 FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null...

  • CVE-2026-114047

    🚨 CVE-2026-114047 FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted...

  • CVE-2026-114048

    🚨 CVE-2026-114048 WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that...

  • CVE-2026-114049

    🚨 CVE-2026-114049 vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other...

  • CVE-2026-114050

    🚨 CVE-2026-114050 vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits...

  • CVE-2026-114051

    🚨 CVE-2026-114051 vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the...

  • CVE-2026-114052

    🚨 CVE-2026-114052 vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a...

  • CVE-2026-114053

    🚨 CVE-2026-114053 vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers...

  • CVE-2026-114054

    🚨 CVE-2026-114054 vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by...

  • CVE-2026-114055

    🚨 CVE-2026-114055 vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control...

Статистика статей

Статьи
53,087
Просмотры
255,260
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху