CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113355

    🚨 CVE-2026-113355 Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject...

  • CVE-2026-113356

    🚨 CVE-2026-113356 DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file...

  • CVE-2026-113357

    🚨 CVE-2026-113357 @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI...

  • CVE-2026-113358

    🚨 CVE-2026-113358 LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated...

  • CVE-2026-113583

    🚨 CVE-2026-113583 Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to...

  • CVE-2026-105941

    🚨 CVE-2026-105941 The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format...

  • CVE-2026-113399

    🚨 CVE-2026-113399 Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

  • CVE-2026-113400

    🚨 CVE-2026-113400 Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

  • CVE-2026-113401

    🚨 CVE-2026-113401 Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

  • CVE-2026-113470

    🚨 CVE-2026-113470 Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients...

  • CVE-2026-34484

    🚨 CVE-2026-34484 Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell...

  • CVE-2026-34485

    🚨 CVE-2026-34485 Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can...

  • CVE-2026-101296

    🚨 CVE-2026-101296 A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non...

  • CVE-2026-111761

    🚨 CVE-2026-111761 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in...

  • CVE-2026-111762

    🚨 CVE-2026-111762 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in...

  • CVE-2026-112942

    🚨 CVE-2026-112942 launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware...

  • CVE-2026-112943

    🚨 CVE-2026-112943 launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape...

  • CVE-2026-112944

    🚨 CVE-2026-112944 launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create...

Статистика статей

Статьи
53,084
Просмотры
241,644
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху