CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-100352

    🚨 CVE-2026-100352 kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and...

  • CVE-2026-58390

    🚨 CVE-2026-58390 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard...

  • CVE-2026-58391

    🚨 CVE-2026-58391 OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored...

  • CVE-2026-88753

    🚨 CVE-2026-88753 A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm...

  • CVE-2026-97394

    🚨 CVE-2026-97394 kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array...

  • CVE-2026-61610

    🚨 CVE-2026-61610 Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST...

  • CVE-2026-77467

    🚨 CVE-2026-77467 Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but...

  • CVE-2026-55480

    🚨 CVE-2026-55480 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20...

  • CVE-2026-106701

    🚨 CVE-2026-106701 ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig...

  • CVE-2026-12489

    🚨 CVE-2026-12489 An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through...

  • CVE-2026-86467

    🚨 CVE-2026-86467 Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser...

  • CVE-2026-96656

    🚨 CVE-2026-96656 Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference...

  • CVE-2026-103849

    🚨 CVE-2026-103849 Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could...

  • CVE-2026-108743

    🚨 CVE-2026-108743 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact...

  • CVE-2026-43865

    🚨 CVE-2026-78162 Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5...

  • CVE-2026-78165

    🚨 CVE-2026-78165 Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from...

  • CVE-2026-79983

    🚨 CVE-2026-79983 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component...

  • CVE-2026-79984

    🚨 CVE-2026-79984 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component...

Статистика статей

Статьи
53,084
Просмотры
238,885
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху