CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-86471

    🚨 CVE-2026-86471 An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to...

  • CVE-2026-90797

    🚨 CVE-2026-90797 An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to...

  • CVE-2026-90798

    🚨 CVE-2026-90798 A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication...

  • CVE-2026-90799

    🚨 CVE-2026-90799 Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause...

  • CVE-2026-90800

    🚨 CVE-2026-90800 Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full...

  • CVE-2026-91057

    🚨 CVE-2026-91057 `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is...

  • CVE-2026-92843

    🚨 CVE-2026-92843 A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an...

  • CVE-2026-92853

    🚨 CVE-2026-92853 The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first...

  • CVE-2026-93003

    🚨 CVE-2026-93003 The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header...

  • CVE-2026-93475

    🚨 CVE-2026-93475 The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into...

  • CVE-2026-94018

    🚨 CVE-2026-94018 The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow...

  • CVE-2026-94023

    🚨 CVE-2026-94023 A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question...

  • CVE-2026-94024

    🚨 CVE-2026-94024 The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as...

  • CVE-2026-94192

    🚨 CVE-2026-94192 A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that...

  • CVE-2026-94202

    🚨 CVE-2026-94202 The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a...

  • CVE-2026-95107

    🚨 CVE-2026-95107 A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte...

  • CVE-2026-95108

    🚨 CVE-2026-95108 One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The...

  • CVE-2026-95109

    🚨 CVE-2026-95109 The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common...

Статистика статей

Статьи
53,084
Просмотры
241,644
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху