CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-105312

    🚨 CVE-2026-105312 A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary...

  • CVE-2026-113388

    🚨 CVE-2026-113388 A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file...

  • CVE-2026-113392

    🚨 CVE-2026-113392 A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file...

  • CVE-2026-113396

    🚨 CVE-2026-113396 A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of...

  • CVE-2026-112936

    🚨 CVE-2026-112936 filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions...

  • CVE-2025-71436

    🚨 CVE-2025-71436 Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in...

  • CVE-2026-107755

    🚨 CVE-2026-107755 Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an...

  • CVE-2026-111764

    🚨 CVE-2026-111764 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore...

  • CVE-2026-112824

    🚨 CVE-2026-112824 Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation...

  • CVE-2026-112836

    🚨 CVE-2026-112836 Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue...

  • CVE-2026-112946

    🚨 CVE-2026-112946 Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record...

  • CVE-2026-112948

    🚨 CVE-2026-112948 Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny...

  • CVE-2026-112951

    🚨 CVE-2026-112951 ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content...

  • CVE-2026-112956

    🚨 CVE-2026-112956 ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import...

  • CVE-2026-113594

    🚨 CVE-2026-113594 Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide...

  • CVE-2026-113597

    🚨 CVE-2026-113597 Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated...

  • CVE-2026-113599

    🚨 CVE-2026-113599 Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create...

  • CVE-2026-113602

    🚨 CVE-2026-113602 json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode...

Статистика статей

Статьи
53,084
Просмотры
240,345
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху