CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112300

    🚨 CVE-2026-112300 A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of...

  • CVE-2026-112391

    🚨 CVE-2026-112391 Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while...

  • CVE-2026-112261

    🚨 CVE-2026-112261 A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free...

  • CVE-2026-112360

    🚨 CVE-2026-112360 A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the...

  • CVE-2026-112396

    🚨 CVE-2026-112396 Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while...

  • CVE-2026-112401

    🚨 CVE-2026-112401 Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments...

  • CVE-2026-112406

    🚨 CVE-2026-112406 Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages...

  • CVE-2026-112895

    🚨 CVE-2026-112895 Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during...

  • CVE-2026-112901

    🚨 CVE-2026-112901 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of...

  • CVE-2026-112372

    🚨 CVE-2026-112372 A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This...

  • CVE-2026-105453

    🚨 CVE-2026-105453 IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain...

  • CVE-2026-109442

    🚨 CVE-2026-109442 piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and...

  • CVE-2026-109444

    🚨 CVE-2026-109444 OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run...

  • CVE-2026-77930

    🚨 CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by...

  • CVE-2026-77936

    🚨 CVE-2026-77936 Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and...

  • CVE-2026-93300

    🚨 CVE-2026-93300 The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up...

  • CVE-2026-110095

    🚨 CVE-2026-110095 fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through...

  • CVE-2026-110180

    🚨 CVE-2026-110180 fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3...

Статистика статей

Статьи
53,084
Просмотры
240,345
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху