CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112774

    🚨 CVE-2026-112774 Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to...

  • CVE-2026-112779

    🚨 CVE-2026-112779 Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code...

  • CVE-2026-112257

    🚨 CVE-2026-112257 A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and...

  • CVE-2026-112258

    🚨 CVE-2026-112258 A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later...

  • CVE-2026-112261

    🚨 CVE-2026-112261 A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free...

  • CVE-2026-112358

    🚨 CVE-2026-112358 A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects...

  • CVE-2026-112392

    🚨 CVE-2026-112392 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a...

  • CVE-2026-112400

    🚨 CVE-2026-112400 Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a...

  • CVE-2026-112894

    🚨 CVE-2026-112894 Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when...

  • CVE-2026-112900

    🚨 CVE-2026-112900 Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking...

  • CVE-2025-36061

    🚨 CVE-2025-36061 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an...

  • CVE-2025-36069

    🚨 CVE-2025-36069 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated...

  • CVE-2025-36252

    🚨 CVE-2025-36252 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session...

  • CVE-2026-112371

    🚨 CVE-2026-112371 A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the...

  • CVE-2026-19178

    🚨 CVE-2026-19178 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized...

  • CVE-2026-105453

    🚨 CVE-2026-105453 IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain...

  • CVE-2026-107366

    🚨 CVE-2026-107366 IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated...

  • CVE-2026-107400

    🚨 CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due...

Статистика статей

Статьи
53,084
Просмотры
239,652
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху