CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-100222

    🚨 CVE-2026-100222 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100225

    🚨 CVE-2026-100225 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  • CVE-2026-102186

    🚨 CVE-2026-102186 Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

  • CVE-2026-64959

    🚨 CVE-2026-64959 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical...

  • CVE-2026-111713

    🚨 CVE-2026-111713 tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefixed...

  • CVE-2026-111723

    🚨 CVE-2026-111723 LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage...

  • CVE-2026-111999

    🚨 CVE-2026-111999 Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to...

  • CVE-2026-112004

    🚨 CVE-2026-112004 Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename...

  • CVE-2026-112014

    🚨 CVE-2026-112014 LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API...

  • CVE-2026-112048

    🚨 CVE-2026-112048 libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger...

  • CVE-2025-60480

    🚨 CVE-2025-60480 A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box...

  • CVE-2026-112769

    🚨 CVE-2026-112769 Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of...

  • CVE-2026-112771

    🚨 CVE-2026-112771 Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains...

  • CVE-2026-112776

    🚨 CVE-2026-112776 Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to...

  • CVE-2026-112781

    🚨 CVE-2026-112781 Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected...

  • CVE-2026-71170

    🚨 CVE-2026-71170 Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged...

  • CVE-2026-112299

    🚨 CVE-2026-112299 A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function...

  • CVE-2026-112390

    🚨 CVE-2026-112390 Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count...

Статистика статей

Статьи
53,084
Просмотры
239,652
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху