CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113868

    🚨 CVE-2026-113868 When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid...

  • CVE-2026-113869

    🚨 CVE-2026-113869 When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an...

  • CVE-2026-86409

    🚨 CVE-2026-86409 Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentation. A...

  • CVE-2026-86410

    🚨 CVE-2026-86410 A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP...

  • CVE-2026-86411

    🚨 CVE-2026-86411 An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle...

  • CVE-2026-86412

    🚨 CVE-2026-86412 A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next...

  • CVE-2026-86413

    🚨 CVE-2026-86413 When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on...

  • CVE-2026-94131

    🚨 CVE-2026-94131 Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A...

  • CVE-2026-94132

    🚨 CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise...

  • CVE-2026-107805

    🚨 CVE-2026-107805 Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path...

  • CVE-2026-107806

    🚨 CVE-2026-107806 Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active...

  • CVE-2026-109678

    🚨 CVE-2026-109678 FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable...

  • CVE-2026-109679

    🚨 CVE-2026-109679 FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an...

  • CVE-2026-109680

    🚨 CVE-2026-109680 FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to...

  • CVE-2026-107885

    🚨 CVE-2026-107885 OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of...

  • CVE-2026-107886

    🚨 CVE-2026-107886 OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an...

  • CVE-2026-107888

    🚨 CVE-2026-107888 OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create...

  • CVE-2026-107890

    🚨 CVE-2026-107890 OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests...

Статистика статей

Статьи
53,084
Просмотры
242,330
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху