CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-112897

    🚨 CVE-2026-112897 Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff...

  • CVE-2026-112898

    🚨 CVE-2026-112898 Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when...

  • CVE-2026-112900

    🚨 CVE-2026-112900 Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking...

  • CVE-2026-112901

    🚨 CVE-2026-112901 Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of...

  • CVE-2026-53995

    🚨 CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated...

  • CVE-2026-19754

    🚨 CVE-2026-19754 Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. An authenticated...

  • CVE-2025-36061

    🚨 CVE-2025-36061 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an...

  • CVE-2025-36069

    🚨 CVE-2025-36069 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated...

  • CVE-2025-36252

    🚨 CVE-2025-36252 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session...

  • CVE-2026-112370

    🚨 CVE-2026-112370 A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist...

  • CVE-2026-112371

    🚨 CVE-2026-112371 A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the...

  • CVE-2026-112372

    🚨 CVE-2026-112372 A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This...

  • CVE-2026-112991

    🚨 CVE-2026-112991 The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its...

  • CVE-2026-19178

    🚨 CVE-2026-19178 IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized...

  • CVE-2026-19595

    🚨 CVE-2026-19595 The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output...

  • CVE-2026-77684

    🚨 CVE-2026-77684 The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command...

  • CVE-2026-19754

    🚨 CVE-2026-19754 Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in the index() formula function. A low-privileged...

  • CVE-2026-87766

    🚨 CVE-2026-87766 A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent...

Статистика статей

Статьи
53,084
Просмотры
238,025
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху