CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113604

    🚨 CVE-2026-113604 Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays...

  • CVE-2026-113607

    🚨 CVE-2026-113607 Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated...

  • CVE-2026-113609

    🚨 CVE-2026-113609 Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to...

  • CVE-2026-113612

    🚨 CVE-2026-113612 SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other...

  • CVE-2026-113676

    🚨 CVE-2026-113676 Froxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get API command that allows...

  • CVE-2026-113679

    🚨 CVE-2026-113679 HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the...

  • CVE-2026-113681

    🚨 CVE-2026-113681 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in...

  • CVE-2026-113703

    🚨 CVE-2026-113703 SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where...

  • CVE-2026-86471

    🚨 CVE-2026-86471 An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to...

  • CVE-2026-90797

    🚨 CVE-2026-90797 An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to...

  • CVE-2026-90798

    🚨 CVE-2026-90798 A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication...

  • CVE-2026-90799

    🚨 CVE-2026-90799 Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause...

  • CVE-2026-90800

    🚨 CVE-2026-90800 Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full...

  • CVE-2026-112957

    🚨 CVE-2026-112957 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST endpoint for pages does not...

  • CVE-2026-112958

    🚨 CVE-2026-112958 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style...

  • CVE-2026-113648

    🚨 CVE-2026-113648 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint...

  • CVE-2026-113649

    🚨 CVE-2026-113649 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core...

  • CVE-2026-113650

    🚨 CVE-2026-113650 ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allowed and...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху