CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-79983

    🚨 CVE-2026-79983 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component...

  • CVE-2026-79984

    🚨 CVE-2026-79984 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component...

  • CVE-2026-79985

    🚨 CVE-2026-79985 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component...

  • CVE-2026-112361

    🚨 CVE-2026-112361 A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file...

  • CVE-2026-112891

    🚨 CVE-2026-112891 Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long...

  • CVE-2026-112896

    🚨 CVE-2026-112896 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF...

  • CVE-2026-19178

    🚨 CVE-2026-19178 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized...

  • CVE-2026-107366

    🚨 CVE-2026-107366 IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated...

  • CVE-2026-107400

    🚨 CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due...

  • CVE-2026-112373

    🚨 CVE-2026-112373 A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file...

  • CVE-2026-109443

    🚨 CVE-2026-109443 JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system...

  • CVE-2026-77933

    🚨 CVE-2026-77933 DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static...

  • CVE-2026-77935

    🚨 CVE-2026-77935 Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated...

  • CVE-2026-77937

    🚨 CVE-2026-77937 Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by...

  • CVE-2026-77938

    🚨 CVE-2026-77938 Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets...

  • CVE-2026-86949

    🚨 CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious...

  • CVE-2026-86961

    🚨 CVE-2026-86961 A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A...

  • CVE-2026-113380

    🚨 CVE-2026-113380 In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a...

Статистика статей

Статьи
53,084
Просмотры
238,885
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху