CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-113459

    🚨 CVE-2026-113459 In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor...

  • CVE-2026-113468

    🚨 CVE-2026-113468 The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider...

  • CVE-2026-43849

    🚨 CVE-2026-43849 A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  • CVE-2026-43851

    🚨 CVE-2026-43851 A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

  • CVE-2026-43852

    🚨 CVE-2026-43852 A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

  • CVE-2026-43853

    🚨 CVE-2026-43853 A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

  • CVE-2026-43854

    🚨 CVE-2026-43854 A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for...

  • CVE-2026-43855

    🚨 CVE-2026-43855 A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  • CVE-2026-43856

    🚨 CVE-2026-43856 A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to...

  • CVE-2026-43857

    🚨 CVE-2026-43857 A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

  • CVE-2026-43858

    🚨 CVE-2026-43858 A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  • CVE-2026-85267

    🚨 CVE-2026-85267 A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an...

  • CVE-2026-111283

    🚨 CVE-2026-111283 BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows...

  • CVE-2026-28853

    🚨 CVE-2026-28853 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to...

  • CVE-2026-86921

    🚨 CVE-2026-86921 A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS...

  • CVE-2026-86922

    🚨 CVE-2026-86922 A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27...

  • CVE-2026-86928

    🚨 CVE-2026-86928 A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to...

  • CVE-2026-86932

    🚨 CVE-2026-86932 An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be...

Статистика статей

Статьи
53,084
Просмотры
238,885
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху