CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113668

    🚨 CVE-2026-113668 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET...

  • CVE-2026-113669

    🚨 CVE-2026-113669 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of...

  • CVE-2026-113670

    🚨 CVE-2026-113670 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page...

  • CVE-2026-113671

    🚨 CVE-2026-113671 ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an...

  • CVE-2026-113672

    🚨 CVE-2026-113672 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2...

  • CVE-2026-113710

    🚨 CVE-2026-113710 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint...

  • CVE-2026-113711

    🚨 CVE-2026-113711 ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the...

  • CVE-2026-84884

    🚨 CVE-2026-84884 IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An...

  • CVE-2026-84893

    🚨 CVE-2026-84893 IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit...

  • CVE-2026-100653

    🚨 CVE-2026-100653 vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied...

  • CVE-2026-102201

    🚨 CVE-2026-102201 Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

  • CVE-2026-102202

    🚨 CVE-2026-102202 Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate...

  • CVE-2026-102203

    🚨 CVE-2026-102203 Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code...

  • CVE-2026-102205

    🚨 CVE-2026-102205 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate...

  • CVE-2026-102206

    🚨 CVE-2026-102206 Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a...

  • CVE-2026-102207

    🚨 CVE-2026-102207 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an...

  • CVE-2026-102208

    🚨 CVE-2026-102208 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  • CVE-2023-43661

    🚨 CVE-2023-43661 Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху