CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113393

    🚨 CVE-2026-113393 A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the...

  • CVE-2026-113394

    🚨 CVE-2026-113394 A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file...

  • CVE-2026-113395

    🚨 CVE-2026-113395 A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape...

  • CVE-2026-113396

    🚨 CVE-2026-113396 A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of...

  • CVE-2026-74048

    🚨 CVE-2026-74048 Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS...

  • CVE-2026-74049

    🚨 CVE-2026-74049 Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...

  • CVE-2026-80353

    🚨 CVE-2026-80353 Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the...

  • CVE-2026-88041

    🚨 CVE-2026-88041 Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a...

  • CVE-2026-91041

    🚨 CVE-2026-91041 Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The...

  • CVE-2026-93446

    🚨 CVE-2026-93446 Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects...

  • CVE-2026-96406

    🚨 CVE-2026-96406 A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input...

  • CVE-2026-96582

    🚨 CVE-2026-96582 A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that...

  • CVE-2026-63690

    🚨 CVE-2026-63690 Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability...

  • CVE-2026-107812

    🚨 CVE-2026-107812 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a...

  • CVE-2026-107813

    🚨 CVE-2026-107813 Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and...

  • CVE-2026-10579

    🚨 CVE-2026-10579 A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no...

  • CVE-2026-15554

    🚨 CVE-2026-15554 the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication...

  • CVE-2026-15555

    🚨 CVE-2026-15555 A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху