CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-91189

    🚨 CVE-2026-91189 The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and...

  • CVE-2026-92162

    🚨 CVE-2026-92162 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on...

  • CVE-2026-92446

    🚨 CVE-2026-92446 `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and...

  • CVE-2026-92449

    🚨 CVE-2026-92449 `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read...

  • CVE-2026-92454

    🚨 CVE-2026-92454 The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it...

  • CVE-2026-95111

    🚨 CVE-2026-95111 A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the...

  • CVE-2026-95168

    🚨 CVE-2026-95168 An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in...

  • CVE-2026-96402

    🚨 CVE-2026-96402 A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking...

  • CVE-2026-97400

    🚨 CVE-2026-97400 In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code...

  • CVE-2026-62895

    🚨 CVE-2026-62895 Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a...

  • CVE-2026-4921

    🚨 CVE-2026-4921 IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical...

  • CVE-2026-107807

    🚨 CVE-2026-107807 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master...

  • CVE-2026-107808

    🚨 CVE-2026-107808 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does...

  • CVE-2026-102187

    🚨 CVE-2026-102187 Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

  • CVE-2026-102188

    🚨 CVE-2026-102188 Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a...

  • CVE-2026-111124

    🚨 CVE-2026-111124 CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows...

  • CVE-2026-111125

    🚨 CVE-2026-111125 CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers...

  • CVE-2026-111217

    🚨 CVE-2026-111217 Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP...

Статистика статей

Статьи
53,084
Просмотры
239,652
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху