CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91059

    🚨 CVE-2026-91059 The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS`...

  • CVE-2026-91186

    🚨 CVE-2026-91186 The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already...

  • CVE-2026-91189

    🚨 CVE-2026-91189 The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and...

  • CVE-2026-92446

    🚨 CVE-2026-92446 `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and...

  • CVE-2026-92449

    🚨 CVE-2026-92449 `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read...

  • CVE-2026-92454

    🚨 CVE-2026-92454 The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it...

  • CVE-2026-95111

    🚨 CVE-2026-95111 A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the...

  • CVE-2026-96402

    🚨 CVE-2026-96402 A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking...

  • CVE-2026-97400

    🚨 CVE-2026-97400 In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code...

  • CVE-2026-107755

    🚨 CVE-2026-107755 Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an...

  • CVE-2026-109700

    🚨 CVE-2026-109700 Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting...

  • CVE-2026-111763

    🚨 CVE-2026-111763 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised...

  • CVE-2026-111765

    🚨 CVE-2026-111765 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version...

  • CVE-2026-111843

    🚨 CVE-2026-111843 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblox...

  • CVE-2026-112823

    🚨 CVE-2026-112823 Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue...

  • CVE-2026-112824

    🚨 CVE-2026-112824 Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation...

  • CVE-2026-112836

    🚨 CVE-2026-112836 Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue...

  • CVE-2026-112840

    🚨 CVE-2026-112840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart...

Статистика статей

Статьи
53,084
Просмотры
241,644
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху