CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-87861

    🚨 CVE-2026-87861 When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously...

  • CVE-2026-87862

    🚨 CVE-2026-87862 Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when...

  • CVE-2026-87864

    🚨 CVE-2026-87864 Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting...

  • CVE-2026-87865

    🚨 CVE-2026-87865 When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a...

  • CVE-2026-87866

    🚨 CVE-2026-87866 When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess...

  • CVE-2026-92386

    🚨 CVE-2026-92386 When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that...

  • CVE-2026-92387

    🚨 CVE-2026-92387 By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and...

  • CVE-2026-92388

    🚨 CVE-2026-92388 When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write...

  • CVE-2026-92389

    🚨 CVE-2026-92389 libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening...

  • CVE-2026-92390

    🚨 CVE-2026-92390 When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an...

  • CVE-2026-92391

    🚨 CVE-2026-92391 A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup...

  • CVE-2026-94265

    🚨 CVE-2026-94265 When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain...

  • CVE-2026-94266

    🚨 CVE-2026-94266 libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even...

  • CVE-2026-9659

    🚨 CVE-2026-9659 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s)...

  • CVE-2026-9660

    🚨 CVE-2026-9660 Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s)...

  • CVE-2026-9814

    🚨 CVE-2026-9814 An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s)...

  • CVE-2026-9817

    🚨 CVE-2026-9817 A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)...

  • CVE-2026-9827

    🚨 CVE-2026-9827 A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s)...

Статистика статей

Статьи
53,084
Просмотры
242,330
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху